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COLONEL  DANIEL  0.  WALSH 

Col  Daniel  0.  Walsh  is  the  Vice  Commander, 

56th  Tactical  Fighter  Wing,  MacDill  Air  Force 
Base,  Florida. 

Col  Walsh  entered  active  military  service  with 
the  United  States  Air  Force  in  August  of  1952, 
having  been  commissioned  a Second  Lieutenant 
through  the  ROTC  program.  He  attended  flying 
school  at  Hondo  Air  Base,  and  Foster  Air  Force 
Base,  both  located  in  Texas;  receiving  his 
wings  in  December  1953. 

His  Southeast  Asia  combat  experience  includes 
a four  month  temporary  duty  assignment  in  1966 
flying  F-lOOs  at  Ben  Hoa  Air  Base,  Vietnam  and 
a tour  with  the  555th  Tactical  Fighter  Souadron 
(Triple  Nickel)  in  1968  flying  F-4Ds.  He 
logged  a total  of  146  flying  missions,  90  of 
which  were  over  North  Vietnam. 


A.  W.  "BILL"  KELLEY 

A graduate  of  the  University  of 
Minnesota,  he  has  25  years  in  the 
Aerospace  and  Defense  business  with 
Honeywell,  and  is  presently  the  Vice 
President  of  Operations  at  the 
Honeywell  Aerospace  Division  in  St. 
Petersburg.  As  such,  he  has  responsi- 
bility for  engineering,  production, 
inertial  components  and  programs. 

Prior  to  his  assignment  in  197],  he  held 
the  position  of  Vice  President  of 
Operations  at  the  Minneapolis  Aero 
Division  of  Honeywell. 


Upon  completion  of  National  War  College  in 
1973,  Col  Walsh  was  assigned  to  Headquarters 
USAF  (Pentagon)  where  he  was  Chief,  Weapons 
and  Weapons  Systems  Branch;  Chief,  Tactical 
Division  and  finally.  Assistant  Deputy  Director 
of  Operations  for  Operational  Forces.  He  was 
reassigned  to  MacDill  Air  Force  Base  in  August 
1975. 

Col  Walsh's  directions  include  the  Distinguished 
Flying  Cross  with  two  oak  leaf  clusters.  Bronze 
Star  and  Air  Medal  with  16  oak  leaf  clusters. 

He  is  a command  pilot  with  4100  hours  jet 
fighter  flying  experience. 
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BANQUET  CHAIRMAN 


COLONEL  WILLIAM  H.  BUSH,  COMMANDER,  AGMC 

Colonel  William  H.  Bush  is  Commander  of  Air  Force  Logistics  Command's 
Aerospace  Guidance  and  Metrology  Center,  Newark  Air  Force  Station,  Ohio. 

Colonel  Bush's  previous  assignment  was  as  Commander  of  the  44th  Strategic 
Missile  Wing  at  Ellsworth  Air  Force  Base,  South  Dakota,  from  24  October 
1973  until  taking  command  of  AGMC  on  30  June  1975. 

Colonel  Bush  is  a Master  Navigator  with  4,400  hours  of  flying  time  and  a 
Master  Missileman.  His  military  service  spans  more  than  30  years  in  three 
wars  and  has  included  assignments  in  nine  officer  career  fields  and  six 
major  air  coimands. 

In  1956  he  was  involved  in  the  first  air-dropped  hydrogen  bomb  tests, 
nicknamed  "Project  Red  Wing"  at  Eniwetok.  While  there,  he  published  a 
classified  report  on  the  first  airborne  doppler  radar  navigation  system, 
the  APN-82.  This  system  was  first  used  on  the  WB-50  aircraft  and  is  still 
used  in  the  KC-135  today. 

Colonel  Bush's  decorations  include  the  Legion  of  Merit,  the  Meritorious 
Service  Medal  with  oak  leaf  cluster,  the  Air  Force  Commendation  Medal  with 
two  oak  leaf  clusters,  the  Presidential  Unit  Citation,  and  the  Air  Force 
Outstanding  Unit  Award. 


BANQUET  SPEAKER 


JOHN  W.  YOUNG,  CAPT  USN 


Captain  John  Young  joined  the  Navy  in  1952  after  graduation  from  Georgia 
Institute  of  Technology.  In  1962  he  set  the  world  time-to-climb  records 
to  3000  and  25000  meter  altitudes  in  the  "Phantom."  Captain  Young  was 
selected  as  an  Astronaut  by  NASA  in  September  1962.  He  served  as  pilot 
with  command  pilot  Gus  Grissom  on  the  first  manned  Gemini  flight  in  March 
1965  and  was  later  backup  pilot  on  Gemini  6. 


In  July  1966  Captain  Young  was  the  command  pilot  on  the  Gemini  10  mission. 
Following  this  mission,  he  was  assigned  as  backup  command  module  pilot  for 
Apollo  7.  He  was  then  command  module  pilot  for  Apollo  10  in  May  1969,  the 
comprehensive  lunar-orbital  qualification  test  of  the  Apollo  lunar  module. 
His  fourth  space  flight  was  as  Spacecraft  Commander  of  Apollo  16  in  April 
1972.  Captain  Young  spent  71  hours  and  14  minutes  on  the  moon,  logging  20 
hours  and  15  minutes  in  extra-vehicular  activities.  After  that  mission, 
Captain  Young  was  backup  Spacecraft  Commander  for  Apollo  17. 


In  January  1973,  he  was  assigned  responsibility  for  the  Space  Shuttle  Branch 
of  the  Astronaut  Office.  In  January  1975,  Captain  Young  was  named  Chief 
of  the  Astronaut  Office  for  the  Flight  Operations  Directorate. 
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MR  EARL  T.  BODEM,  AGMC 

Mr  Bodem  is  the  Director  of  Plans  and  Programs  Office,  Aerospace  Guidance 
and  Metrology  Center.  He  has  served  over  30  years  with  the  US  Air  Force. 
During  this  period  he  has  held  staff  and  management  level  positions  at  the 
Air  Force  Logistics  Command  in  Dayton,  the  Air  Force  Systems  Command, 
Aeronautical  Systems  Division  and  at  Hickam  Field,  Hawaii.  While  at  the 
Air  Force  Logistics  Command  Headquarters  Mr  Bodem  ccnceived  the  idea, 
developed  and  implemented  the  initial  planning  which  led  to  establishment 
of  the  Air  Force  single  point  repair  of  inertial  systems  at  the  Newark 
facility.  Over  the  past  17  years  Mr  Bodem  has  received  three  Superior 
Performance  Awards,  two  Outstanding  Awards  as  well  as  the  Meritorious 
Civilian  Service  Medal  which  is  the  highest  civilian  award  for  Civil 
Service.  Mr  Bodem  has  prepared  and  released  a number  of  publications 
within  the  Air  Force. 

Mr  Bodem  obtained  his  formal  education  at  the  University  of  Dayton  and  the 
University  of  Michigan  and  has  graduated  from  a number  of  Department  of 
Defense  training  programs.  He  originated  the  Joint  Services  Data  Exchange 
Group  for  Inertial  Systems  and  has  served  as  permanent  Secretary  since 
inception  of  the  group  in  March  1969. 
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KEYNOTE  SPEAKER 


DR  JOHN  J.  MARTIN 

Dr  John  J.  Martin  was  appointed  Principal  Deputy  Assistant  Secretary  of 
the  Air  Force  (Research  and  Development)  on  29  September  1974.  During 
WW  II  he  served  as  a Naval  Officer  - while  in  service  he  studied  at  the 
Naval  Academy,  Harvard  and  MIT,  later  he  received  his  MSME  from  Notre 
Dame  in  1950  and  his  PhD  from  Purdue  in  1951.  He  has  worked  as  a 
research  engineer  for  North  American  Aviation  and  later  for  the  Bendix 
Aviation  Corp  where  he  progressed  from  Sr  Engineer  to  Chief  of  Engineering 
Research  at  the  Bendix  Advanced  Development  Laboratory  in  1959. 

He  has  been  associated  with  the  Institute  for  Defense  Analysis  and  on  the 
staff  of  the  President's  Science  Advisor.  More  recently.  Dr  Martin  was 
Associate  Deputy  to  the  Director  of  Central  Intelligence  for  the 
intelligence  community  and  in  1974  he  was  appointed  special  assistant  to 
the  DCI  for  intelligence  information  systems. 

Dr  Martin  has  written  several  monographs  and  papers  and  has  disclosed  a 
classified  patent  "Ballistic  Missile  Defense  System."  His  book. 
Atmospheric  Reentry  (1966)  has  been  translated  into  Russian. 


Vk.  Martin'*  keynote  addreu  um  not  available 
at  p*e&*  time.  Rathe*  than  delay  publication 
any  longe * It  uxu  decided  to  print  the  balance 
°i  the&e  proceedings  and  make  the  keynote 
addrei*  available  by  request.  Send  you* 
request  to: 


AGMC/XRX 

Newark  AF S OH  : 430 55 
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'.  . . The  puxpoi e o ^ a keynote  ii  generally  to  give  tome  dixection  - 
4 owe  -uiea4  about  how  thingi  axe  4 ecu  j^-cm  a di^exent  point  o&  view 
with  xei pect  to  the  woa.Ii  a gAoup  like  thii  ii  doing. 

Ue  axe  in  a time  o$  &lux  with  xeipect  to  the  <J ielxi  o&  techno- 
logy that  IWS  ii>  imbedded  in.  I don't  mean  to  xei txict  the  text 
juit  to  the  technologiei  and  the  cixcumitanceA  iuXAo unding  it  dealing 
with  I MS,  but  to  xeitate  that  we  xeally  axe  in  a itate  theAe 

dayi  - to  the  degxc.e  that  thoie  o£  you  who  axe  int excited  in  the 
technology  - thae  o&  you  who  axe  intexeAted  in  ajitemi  applicatiom  - 
thoic  o&  you  who  axe  buiineAimen  and  thoAe  o & you  who  axe  xeAeaxchexi  - 
■to  the  degxee  you  axe  able  to  pexceive  and  xoApond  to  that  ilux  will 
detexmine  pxogxeii.  I am  confident  we  will  come  thxough  in  good 
ihape.  It  ii  a time  to  be  fiait  on  youx  3 eet  and  to  keep  in  touch  - 
■that,  in  a fieiv  woxdi,  ii  my  keynote  ..." 


I came  here  to  talk  to  you  for  a little  while  and  I suspect  that 
at  least  to  some  degree  you  came  here  to  listen  to  me  for  a little 
while,  and  I'm  going  to  try  to  make  sure  I get  finished  before  you  get 
finished  and  keep  an  eye  on  the  door.  The  purpose  of  this  meeting,  of 
course,  is  inertial  navigation  systems  and  I've  already  said  that  at 
lease  for  these  first  few  words  that.  I'm  going  to  convey  to  you  I'm 
really  talking  in  a somewhat  larger  context.  That  larger  context  is 
the  whole  field  I would  say  of  command,  control  and  communications 
and  I think  that  the  technologies  that  you  apply  borrow  from  that 
field  and  feed  into  that  field  and  so  that  the  things  I am  going  to 
say  in  this  wider  C cubed  context,  I hope  you  will  apply  those  interests 
which  you  have  and  if  they  are  wider  than  mine  is,  then  I would  apply 
them  a little  bit  wider.  Earlier  this  year,  in  Spring  in  fact, 

Secretary  McLucas  asked  a number  of  us.  Jack  O'Neill,  General  Jack 
O'Neill  who  is  now  retired  and  I,  and  in  fact  one  of  your  what  I under- 
stand is  called  the  guidance  mafia  , John  Hepfer,  and  some  others  to 
get  together  to  see  what  the  prospects  were  for  the  Air  Force  in  the 
C-3  area  and  we  studied  this  matter  for  two  or  three  months,  and  we  put 
out  a report  about  one-half  inch  thick  which  essentially  gave  what  our 
perceptions  were.  I kinda  scooped  them  a few  minutes  ago  when  I said 
that  it  is  a time  of  flux;  it  really  is  that;  there  are  wonderful 
opportunities.  We  are  in  a kind  of  technological  change  that  keeps 
bounding  ahead  and  we  do  not  have  to  keep  up  with  that.  I would 
recommend  to  you  if  you  have  the  opportunity  that  you  try  to  read  that 
report.  You  can't  do  it  justice  in  a few  words  and  I'm  not  trying  to 
do  that  here  now,  but  it  really  gives  some  impression  of  what  we  foresee 
for  the  coming  10  years.  In  fact,  I would  give  credit  to  Jack  O'Neill 
for  perceiving  that  perhaps  between  1955  and  1965  we  were  in  a decade 
that  was  dedicated  to  the  missile,  particularly  the  ballistic  missile, 
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and  probably  about  1965  we  came  out  of  that  woods,  so  to  speak,  and  in 
fact  the  work  of  this  group,  or  at  least  its  members,  undoubtedly  con- 
tributed to  our  getting  a lead  in  that  area.  From  '65  to  '75  I believe 
we  have  been  back  in  the  aircraft  area.  The  Air  Force  has  brought  out 
a number  of  wonderful  new  aircraft,  some  of  them  are  already  operational, 
others  have  gone  through  the  prototype  and  will  soon  be  going  into  full 
scale  development.  The  F-16  is  what  I have  in  mind  in  particular.  I 
think  that  decade  of  the  airplane  while  it  is  continuing,  and  we  will 
have  those  wonderful  aircraft  with  us  for  some  time,  essentially  is 
completed  and  I really  believe  and  this  I'm  saying  out  of  tribute  to 
Jack  O'Neill  that  we  are  really  entering  the  C cubed  decade  and  I 
think  that  if  we  can  think  of  it  in  that  kind  of  a context,  that  is  to 
say,  one  in  which  there  is  some  thrust  for  the  next  few  years  and  we 
should  try  to  maximize  its  effect  in  our  defense  interests.  I think 
that  10  years  from  now  when  someone  stands  in  a place  like  this,  he 
will  be  able  to  say  that  we  have  succeeded  in  the  C cubed  decade  just 
the  way  we  did  in  the  aircraft  decade  and  in  the  ballistic  missile 
decade  and  I would  exhort  you  to  go  to  those  lengths.  This  talk  I 
said  some  moments  ago  was  going  to  be  about  standardization  and  its 
benefits  and  costs.  The  benefits  are  I think  pretty  obvious,  at  least 
as  we  try  to  think  about  them  in  the  Air  Force,  We  want  to  have 
cheaper  acquisition  costs,  cheaper  maintenance,  interoperability  and 
those  are  all  the  good  things  that  we  would  like  to  get  through.  There 
ought  to  be  some  benefits  for  those  of  you  who  are  the  providers  of 
those  systems  and  I think  if  we  can  get  to  the  circumstances  that 
we  are  working  toward  (I'll  talk  about  those  in  a few  minutes)  it  will 
offer  benefits  to  you  in  the  way  of  having  easier  ways,  lower  thres- 
ho  Ids  to  cross  in  introducing  technological  breakthroughs  that  you 
are  developing.  I think  there  will  be  some  costs  and  I'm  not  talking 
in  dollar  costs,  I am  talking  in  other  kinds  of  costs.  It  is  certainly 
going  to  be  a more  challenging  time  for  those  of  us  in  the  government 
who  are  trying  to  manage  with  the  flexibility  that  will  permit  this 
kind  of  benefit  to  be  realized  in  that  we  will  have  to  be  more  open 
minded;  we  will  have  to  be  willing  to  be  subject  to  change  all  the  time. 
On  the  other  hand,  those  that  provide  systems  will  not  likely  be  in 
the  position  where  they  can  say,  well,  I've  got  this  system  and  I'm 
going  to  produce  it  for  X years.  I'll  just  keep  stamping  them  out. 

There  will  always  be  that  cost  to  be  paid  which  deals  with  an  implicit 
threat  that  with  the  kind  of  standardization-interoperability  it  will 
be  easier  to  make  changes  and  one  will  need  to  keep  that  competitive 
edge  all  along.  Now,  there  is  another  cost  and  that  is  outside  the 
context  of  U.S.  interests,  and  that  is  the  desire  to  have  standardiza- 
tion with  our  NATO  allies.  The  President  has  spoken  on  the  subject. 

It  is  a DOD  policy  that  we  will  move  in  that  direction  and  what  that 
will  mean  is  that  the  industrial  concerns  in  Europe  and  perhaps  else- 
where will  want  to  share  in  the  production  that  goes  into  the  machines 
like  the  F-16  that  we  procure  in  common.  I visited  some  of  the  NATO 
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nations  a couple  of  months  ago  just  on  the  subject  of  interchange  of 
information  and  what  that  might  lead  to,  and  I think  that  they  are 
learning  a lesson  from  the  concessions,  if  that's  what  they  are,  that 
we  made  in  the  case  of  the  F-16  to  the  consortium,  that  is  to  say, 
the  flexibility  with  which  we  are  willing  to  do  business  with  our  NATO 
allies,  I think  that  another  one  of  the  costs  that  will  be  paid  is 
that  there  will  be  competition  from  quarters  though  we  have  not  seen 
it  before  and  I think  that  will  be  a cost  that  some  of  you  will  feel 
and  some  of  us  will  look  upon  it  as  a policy  direction  that  we  need 
to  implement  because  we  just  can't  keep  sending  our  hardware  to  our 
NATO  allies  and  taking  their  money  in  return.  I think  that  is  going 
to  have  to  be  a two-way  street.  The  sooner  that  we  all  understand 
that,  the  better  off  we  will  be.  I said  that  it's  the  policy  of  the 
executive  department  of  government  that  we  will  move  in  that  direction. 
In  the  Congress,  itself,  some  folks  are  in  favor  of  some  of  that  work 
in  common,  others  are  not.  I think  that  we  will  have  to  continue  the 
educational  process  that  will  cause  there  to  be  a general  understanding 
and  a common  understanding  of  what  our  vest  interests  are  and  that  we 
move  in  that  direction.  As  for  our  NATO  allies,  those  that  I talked 
to  were  quite  pleased  with  the  notion  that  we  were  moving  in  that 
direction,  that  it  was  an  approach  that  we  were  trying  to  take,  and 
their  main  response  was  how  do  we  do  this  and  I think  that  we  will 
have  to  be  helping  them  in  that  respect  in  the  months  ahead.  I said 
that  we  are  in  a time  flux.  What  we  are  really  trying  to  do  these 
days  is  to  break  some  new  ground  in  our  efforts  to  reduce  costs.  We 
have  a list  of  abbreviations  associated  with  concepts  that  we  apply. 

We  design  to  cost,  we  consider  the  life  cycle  costs,  we  talk  about 
reliability  improvement  warranties,  fault-free  warranties,  value 
engineering  changes,  etc.  We  even  talk  about  our  return  on  investment 
and  nobody  really  has  been  clever  enough  to  figure  out  exactly  what 
that  means.  Now  there  are  some  cases  in  which  one  can  talk  about 
return  on  investment,  but  we  have  introduced  these  several  concepts 
that  cover  various  aspects  of  problems  that  we  have  seen,  and  we  are 
going  to  have  to  have  a better  understanding  of  that.  But  in  any 
case,  we  have  begun  to  develop  an  arsenal  of  ideas  that  will  permit 
us  to  respond  to  the  costs  that  we  see  which  continue  to  rise.  We 
will  try,  by  the  procedures  that  we  use  in  contracting  and  procurement, 
to  bring  incentives  that  are  worthwhile  incentives,  on  costs  and 
schedule  and  performance.  Giving  to  those  who  are  making  the  INS  what 
they  need  in  the  way  of  some  return  on  the  investment  that  they  make, 
on  the  other  hand,  gives  us  what  we  need  in  the  Air  Force  for  the 
utilization  of  our  missiles  and  aircraft.  We  have  invented  recently 
something  called  a Life  Cycle  Cost  Council,  John  Toomey  and  Dewey  Logan, 
probably  as  most  of  you  know  are  the  co-chairmen  of  that,  and  there  are 
a few  other  people  in  the  Secretariat  who  are  members  of  that  council. 
It's  a recognition  that  we  need  to  gather  together  ideas  which  are 
appropriate  to  this  subject  and  to  try  to  give  them  some  common  focus 
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and  to  put  them  into  action.  In  fact,  what  we  are  trying  to  do  is 
be  careful  that  quoting  Lincoln  I gues  it  was,  that  we  avoid  the 
circumstances  in  which  we  say,  "don't  get  it  right,  get  it  written," 
which  is  to  say,  "the  hell  with  what  the  structure  of  the  facts  are, 
let's  get  on  with  it."  We  are  trying  to  understand  what  we  are  doing 
at  the  same  time  that  we  are  required  to  be  taking  some  action.  The 
Chief  of  Staff  of  the  Air  Force  has  come  forward  with  an  idea  which 
has  been  captured  in  the  nickname  PRAM  which  I'm  sure  you've  read 
about  which  stands  for  productibility , reliability,  availability,  and 
maintainability.  I think  this  is  another  aspect  of  the  notion  of 
designing  to  cost,  RIW,  FFWs , etc,  but  there  are  just  a lot  of  strings 
all  leading  to  the  concepts  of  how  do  we  get  standardization,  how  do 
we  get  interoperability.  One  of  the  first  things  that  the  Life  Cycle 
Cost  Council  is  going  to  do  is  to  try  to  pool  these  ideas  that  I named 

to  you,  ETC,  LCC,  RIW,  FFW.  In  fact,  we  talk  in  that  jargon  so  much, 

I intentionally  did  that  to  try  to  make  the  point  that  we  almost  some- 
times forget  about  the  meaning  of  the  words  and  let  them  take  on  a 

meaning  that  suits  the  occasion.  One  of  the  first  things  we  are  going 

to  do  in  this  council  is  understand  what  the  process  is  into  which 
these  concepts  fit  so  that  we  know  when  we  want  to  apply  them,  to  what 
degree  and  that  we  don't  overcorrect  or  put  needless  loads  on  the 
people  who  are  trying  to  respond  to  the  meaning  in  the  product  divisions 
of  the  Air  Force,  in  our  laboratories,  in  laboratories  elsewhere  and  in 
industry.  We  are  making  that  effort  and  we  need  your  help  in  that 
effort.  What  we  want  to  get  out  of  this  work  in  the  Life  Cycle  Cost 
Council  and  PRAM  is  some  idea  of  how  to  evolve  the  concept  of  these 
ideas  as  separate  ideas  into  a theory  (I  don't  want  to  sound  too 
analytical  or  too  removed  from  reality)  but  to  try  to  understand  what 
the  structure  is  into  which  they  fit,  try  to  evolve  that  into  a 
practice,  and  then  after  awhile  try  to  establish  a policy  which  can 
be  well  enough  known  that,  knowing  the  rules  of  the  game,  we  will  all 
know  how  to  respond  to  them  and  work  together  harmoniously.  Our 
motivation  in  the  Air  Force  is  to  get  the  performance  we  require. 
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HONEYWELL.  LASER  INERTIAL  NAVL CATION  SYSTEM  (LINS) 
TEST  RESULTS 

Haul  G.  Savage  and  Mario  B.  Ignagni 
Honeywell  Government  and  Aeronautical  Products  Division 
Minneapolis,  Minnesota 


ABSTRACT 

This  paper  describes  the  Honeywell  Laser  Inertial 
Navigation  System  (LINS)  and  presents  results  of 
1975  laboratory,  road,  and  Holloman  flight  tests 
performed  with  LINS  engineering  liardware.  The 
basic  sensing  elements  of  the  LINS  are  Honeywell 
GG1300  laser  gyros.  Advantages  of  LINS  compared 
to  conventional  inertial  navigation  systems  are 
faster  reaction  time  and  lower  procurement/main- 
tenance  costs.  A LINS  engineering  system  was 
road  tested  at  Honeywell  and  then  flight  tested  at 
Holloman  Air  Force  Base  during  May-June  1975  in 
a C-141  aircraft.  System  performance  at  Holloman 
was  0.  7 nmi/h  CEP  (based  on  the  Navy  CAINS 
formula)  for  13  test  flights  (82  aircraft  navigation 
hours  and  65  flight  hours)  without  any  temperature 
controls  or  optical  alignments.  Each  flight  run  was 
from  a cold  start  with  10  minutes  warm-up  and  10 
minutes  alignment.  Over  268  hours  were  accumu- 
lated on  the  system  during  its  test  period  at  Hollo- 
man without  any  failures,  recalibrations,  or  aborted 
tests. 


INTRODUCTION 

Major  breakthroughs  have  occurred  over  the  last 
three  years  in  laser  gyro  technology.  Two  orders  of 
magnitude  performance  improvement  and  the  elim- 
ination of  lifetime  problems  now  make  the  laser 
gyro  a prime  contender  as  the  strapdown  inertial 
sensor  for  the  next  decade.  Performance  data  on 
the  Honeywell  GG1300  laser  gyro  has  demonstrated 
long-term  repeatability  better  than  0.  01  to  0.  02 
deg/h  consistent  with  1 to  2 nmi/h  inertial  naviga- 
tion requirements.  The  ability  to  achieve  these 
performance  levels  without  thermal  controls  pro- 
vides the  potential  for  a 2 to  3 minute  reaction  time 
(warm-up  and  alignment)  for  production  inertial  sys- 
tems using  laser  gyros.  (Three  to  five  minute 
reaction  times  from  a cold  start  with  1 1/2  nmi/h 
performance  have  already  been  demonstrated  in  the 
laboratory  with  LINS  engineering  hardware.  ) This 
is  an  important  performance  advantage  in  military 
applications  requiring  fast  response  (e.  g. , Navy 
carrier  aircraft  operations).  Most  significantly, 
the  acquisition  and  life  cycle  costs  for  laser  gyro 
inertial  navigation  systems  promise  to  be  appreci- 
ably lower  than  for  conventional  gimbaled  navi- 
gators due  to  the  elimination  of  mechanical  gimbals, 
increased  ruggedness,  and  improved  reliability. 

Recognizing  the  potential  for  the  laser  gyro  in 
strapdown  inertial  systems,  Honeywell  in  the 
second  half  of  1971  initiated  an  in-house  program 
to  develop  an  aircraft  strapdown  navigation  system 
to  use  this  new  sensor.  Laser  Inertial  Navigation 
System  (LINS)  is  the  Honeywell  acronym  for  the 
class  of  navigation  systems  developed  under  this 
program. 


A set  of  LINS  engineering  hardware  was  developed 
in  197  5 for  road  and  flight  test  evaluation  purposes. 
This  paper  describes  the  Honeywell  LINS  engi- 
neering hardware,  relating  these  to  projected 
LINS  production  configurations.  Laboratory, 
road,  and  Holloman  flight  tests  performed  with  the 
LINS  engineering  system  are  described  and  test 
data  presented  illustrating  positioning  and  velocity 
accuracy  capabilities. 

BASIC  LINS  CONFIGURATION 

The  basic  elements  used  in  the  Honeywell  Laser 
Inertial  Navigation  System  (LINS)  are  a set  of 
strapdown  laser  angular  rate  sensors  (gyros),  a 
set  of  strapdown  accelerometers,  and  a navigation 
computer  (Figure  1). 
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Figure  1.  Basic  LINS  Functional 
Block  Diagram 

The  laser  gyros  and  accelerometers  provide  pre- 
cision roll /pitch  /yaw  axis  rate  and  acceleration 
signals  to  the  navigation  computer  where  they  are 
compensated  for  known  systematic  errors  (such  as 
fixed  bias  and  scale  factor  error).  The  compen- 
sated signals  are  used  in  a three-axis  attitude  inte- 
gration algorithm  to  compute  aircraft  attitude  rela- 
tive to  local  vertical /azimuth  coordinates.  The 
angular  rate  of  the  aircraft  over  the  surface  of  the 
earth  (due  to  earth's  rotation  and  aircraft  velocity) 
is  included  in  this  computation  to  account  for  the 
rotation  of  the  local  vertical. 

The  aircraft  attitude  data  is  used  to  resolve  the 
roll /pitch /yaw  aircraft  axis  acceleration  vector 
data  into  the  local  vertical/azimuth  coordinate 
frame.  The  computed  horizontal /vertical  acceler- 
ation components  are  then  integrated  in  an  inertial 
velocity /position  algorithm  to  calculate  aircraft 
horizontal  velocity  and  latitude /longitude  position. 
Barometric  altitude  is  used  in  the  inertial  compu- 
tation to  stabilize  the  vertical  channel. 
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LINS  INERTIAL  SENSORS 


GG1300  Laser  Gyro  --  The  baseline  gyro  for  LINS 
is  the  Honeywell  GG 1300  laser  gyro  (Figure  2). 


Figure  3.  Systron  Donner  4841  Accelerometer 


Figure  4 is  an  artist's  conception  of  a production 
LINS  navigation  unit  configuration.  The  navigation 
unit,  packaged  in  a standard  full  long  ATR  case, 
houses  a three-axis  inertial  sensor  assembly 
(laser  gyros  and  accelerometers),  the  system 
computer,  system  power  supply,  and  external  I/O 
for  interfacing  with  other  aircraft  systems.  The 
functional  eration  of  this  system  would  be  as 
depicted  i Figure  1.  The  navigation  unit  in  con- 
junction with  a mode  select  panel  and  a control 
display  unit  would  constitute  a complete  LINS 
navigation  system  that  is  functionally  equivalent 
to  the  gimbaled  inertial  navigation  systems 
currently  in  use  on  today's  military  aircraft. 


Figure  2.  GG1300  Laser  Gyro 


Performance  characteristics  of  today's  GG1300 
technology  are: 

• High  accuracy  (0.  01  deg/h  bias,  0.  0005 
percent  scale  factor  error,  0.  005  deg/h* ^ 
random  walk). 


Fast  reaction  time  (no  heaters  or  warm-up 
requirement). 


• Long-term  stability  (no  preflight  calibra 
tion). 


Fine  resolution  (1.  57  arc  seconds  pulse 
size  over  the  full  operating  range  (-400 
to  +400  deg/s). 
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• G-insensitive  performance 


• High  reliability  (few  assembly  parts  and  no 
moving  parts). 

Systron  Donner  4841  Accelerometer  --  The  base- 
line accelerometer  for  LINS  is  the  Systron  Donner 
Model  4.841  accelerometer  (Figure  3). 

The  4841  is  a low-cost  inertial  grade  electrically 
servoed  accelerometer  designed  for  strapdown 
applications  in  aircraft  and  missiles.  Some  of  the 
significant  features  of  the  4841  include: 

• High  accuracy  (100  ug  bias  stability,  0.  05 
percent  scale  factor  accuracy)  over  wide 
temperature  range  (-65°F  to  160°F)  with- 
out heaters. 
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Fast  reaction  time  (30  seconds) 


Figure  4.  Projected  LINS  Navigation  Unit 


Figure  5 is  a block  diagram  illustrating  the  func- 
tional operation  of  a projected  skewed  redundant 
fail-operational/fail-safe  LINS  production  config- 
uration (compare  with  Figure  1 for  the  non- 
redundant  configuration).  The  system  is  composed 
of  a hexad  (six-axis)  sensor  array  and  triple- 
redundant  computers.  The  hexad  array  is  formed 
from  three  identical  ISA's  (inertial  sensor  assem- 
blies), each  containing  two  gyro/accelerometer 
pairs. 


The  three  two-axis  ISA's  are  mounted  to  a common 
base  (Figure  7).  which  is  part  of  the  aircraft  rack 
structure,  in  precision  alignment  such  that  the 
long  axes  of  the  boxes  are  skewed  relative  to  one 
another. 


v TWO-AXIS  ISA'S 


Each  ISA  shares  a common  power  supply  with  one 
of  the  computers  and  has  its  data  transmission 
synchronized  to  that  computer.  The  three  com- 
puters are  synchronized  together  by  a clock  inter- 
com between  each  computer.  The  two  angular 
rate  and  acceleration  signals  from  each  ISA  are 
transmitted  to  all  computers. 


Figure  7.  HEXAD  Mounting  Arrangement 


Each  of  the  three  sets  of  two  ISA’s  in  Figure  7 de- 
fine a four-axis  (tetrad)  gyro /accelerometer  sen- 
sor array.  With  the  ISA’s  oriented  as  in  Figure  7 
the  four  input  axes  for  each  tetrad  are  non- 
coplanar  (i.  e.  , do  not  lie  in  a single  plane). 

Under  these  conditions,  software  routines  in  each 
computer  can  operate  on  any  one  of  the  three 
tetrad  signal  sets  to  analytically  calculate  the 
equivalent  roll,  pitch,  and  yaw  axis  rate/accelera- 
tion  data  for  computer  operations.  In  addition, 
for  each  tetrad,  three  of  the  four  gyro/accelero- 
meter signals  can  be  combined  to  analytically  de- 
rive the  fourth  gyro/accelerometer  inputs.  If  the 
derived  input  signals  are  unequal  to  the  measured 
fourth  gyro/accelerometer  outputs  (within  pre- 
scribed tolerances),  a failure  in  one  of  the  tetrad 
sensors  is  indicated. 


Figure  5.  Skewed  Redundant  LINS 
Block  Diagram 

The  orientation  of  the  input  axes  of  one  of  the 
gyro /accelerometer  pairs  in  each  inertial  sensor 
assembly  box  (two-axis  ISA),  as  shown  in  Figure 
6,  is  parallel  to  the  long  axis  of  the  ISA  (normal 
to  the  front  face).  The  second  gyro/accelero- 
meter set  is  mounted  with  input  axes  perpendicu- 
lar to  the  first  set  but  skewed  (nonorthogonal) 
relative  to  the  ISA  base. 


This  logic  provides  the  capability  for  assessing 
the  functional  integrity  of  each  of  the  three  tetrads. 
A single  failure  in  the  hexad  (i.  e.  , in  one  of  the 
two-axis  ISA's)  will  cause  two  tetrads  to  exhibit 
failures.  The  third  tetrad  will  not  exhibit  failure, 
thereby  isolating  the  failed  ISA  box  to  the  unit  not 
included  in  the  functioning  tetrad.  Under  these 
conditions,  the  identified  functioning  tetrad  would 
be  used  to  derive  the  roll /pitch /yaw  axis  data  in 
the  computer,  thus  allowing  proper  system  opera- 
tion with  one  failure  (single  fail-operational). 
Multiple  failure  occurrences  can  also  be  identified 
by  this  approach,  but  without  a corresponding 
failure  isolation.  Under  these  conditions,  the  com 
puter  can  be  shut  down  safely  (fail-safe)  and  the 
pilot  notified  of  the  shutdown  by  the  appropriate 
failure  panel  status  lamp.  Thus,  the  hexad  geom- 
etry provides  a single  fail-operational/fail-safe 
sensor  capability.  The  triple-redundant  computer 
configuration  used  with  the  hexad  array  is  con- 
sistent with  this  redundancy  level.  A tetrad  (2 
two-axis  ISA's)  with  a dual-redundant  computer 
would  provide  a fail-safe  capability. 
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Figure  6.  Two-Axis  ISA 


LtMS  ENGINEERING  HARDWARE 


The  LINS  engineering  hardware  developed  for  tests 
in  1975  is  designed  for  assessing  system  per- 
formance with  both  nonredundant  and  skewed  re- 
dundant sensor  operation.  Sufficient  flexibility 
has  been  included  in  the  hardware  design  for  spec- 
ial aircraft  interface  requirements  and  software 
program  development.  Figure  8 defines  the  black- 
box assemblies  that  comprise  the  engineering 
hardware  configuration.  The  hardware  consists  of 
an  inertial  sensor  assembly  (ISA),  a strapdown 
navigation  computer  (SNC),  separate  alterable 
memory  units  for  the  computer,  a control/display 
unit  (CDF),  a computer  control  unit  (CCU),  and  a 
non-interruptable  power  supply  that  enables  system 
operation  through  aircraft  power  switchover  tran- 
sients from  standby  to  primary  power. 
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The  SNC  (Figure  10)  contains  two  HDC-301  proces- 
sors (Figure  11),  8000  words  of  alterable  core 
memory  for  each  processor,  an  ISA  interface,  a 
CCU  interface  for  rapid  computer  program  changes 
and  a CDU  interface  for  pilot-system  communica- 
tion. 
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Figure  8.  LINS  Engineering  Hardware 


The  ISA  (Figure  9)  contains  three  strapdown 
accelerometers  and  four  laser  gyros  (three  ortho- 
gonal, one  on  the  bottom  side  of  the  ISA,  and  a 
fourth  gyro  skewed  relative  to  the  other  three). 
Because  the  gyros  and  accelerometers  are  therm- 
ally insensitive,  the  ISA  is  operated  heaterless. 
Due  to  the  low  power  dissipation  in  the  ISA  (50  W), 
ducted  air  cooling  is  not  required  below  130°F 
ambient. 


LINS  SNC 


The  Honeywell  HDC-301  metal-oxide  semiconduc- 
tor, large-scale  integrated  circuit  (MOS  LSIC) 
processor  is  used  in  the  SNC  to  perform  the  arith- 
metic functions.  The  HDC-301  is  a military- 
qualified,  16-bit  parallel  digital  general-purpose 
processor  with  double-precision  capability  and 
basic  instruction  times  of  3.  8 ns  for  add  and  16  ps 
for  multiply.  It  is  packaged  on  a single  six -inch 
square  multilayer  plug-in  card. 


One  of  the  HDC-301 's  is  used  for  basic  skewed  or 
nonredundant  inertial  calculations.  The  other 
HDC-301  will  be  used  for  experiments  such  as 
Kalman  filter  aiding.  Growth  is  included  in  the 
SNC  interface  for  the  ISA  to  accept  inputs  from  up 
to  six  gyros  and  six  accelerometers.  Growth  pro- 
visions are  included  in  the  SNC  chassis  (nine  plug- 


June  1975  at  Holloman.  Skewed  redundant  and/or 
aided  mode  tests  will  be  performed  at  a later  date 


When  in  the  skew  redundant  mode,  the  system  is 
designed  such  that  any  of  the  four  gyros  can  be 
commanded  to  fail  through  the  CDU  to  exercise  the 
skew  redundancy  failure  detection /replacement 
capability  of  the  system.  The  SNC,  upon  receipt 
of  a failure  command  for  a particular  gyro  from 
the  CDU,  corrupts  the  input  signal  from  that  gyro 
by  software  program  to  simulate  a specified  fail- 
ure mode  (hard  or  soft).  The  failure  mode  soft- 
ware is  alterable  through  CCU  input  to  the  SNC 
memory.  The  SNC  then  operates  on  the  altered 
gyro  signals  in  the  skew-redundant  failure  detec- 
tion software  (also  alterable  through  CCU  inter- 
face). Upon  detecting  that  the  failure  has  oc- 
curred, the  failure  detection  software  issues  a 
discrete  to  the  CDU  to  activate  a failure  indication 
light;  simultaneously,  the  failed  gyro  is  switched 
off-line  and  the  system  converted  to  the  fail- 
operational  mode  with  the  remaining  good  gyros 
providing  data  inputs. 


in  card  connectors  and  slots)  for  the  addition  of 
special  input/output  cards  to  meet  particular  test 
aircraft  requirements.  For  the  Holloman  flight 
test  in  May-June  1975,  an  interface  was  included 
for  a barometric  altimeter  input  and  a flight  re- 
corder output. 


BASIC  LINS  INERTIAL  SOFTWARE 


The  attitude  update  in  the  LINS  inertial  navigation 
software  (Figure  1)  incorporates  a fifth-order 
direction  cosine  algorithm  updated  at  40  Hz  to  32- 
bit  precision  in  conjunction  with  a 160 -Hz  coning 
compensation  algorithm  to  provide  the  combined 
equivalent  of  160 -Hz  total  attitude  update  rate. 
Compensation  is  included  in  the  attitude  update  for 
computer  roundoff,  attitude  algorithm  ortho- 
normalization, and  gyro  deadband,  quantization, 
misalignment,  scale  factor,  and  bias. 

The  position /velocity  update  is  based  on  azimuth 
wander  geodetic  vertical  navigation  coordinates  for 
an  all-earth  capability  with  an  ellipsoidal  earth 
model.  Altitude  stabilization  is  accomplished  with 
a third-order  blending  filter  using  barometric  alti- 
tude input  data.  Compensation  is  included  for 
angular  rotation  during  acceleration  transformation 
accelerometer  assembly  size  effect,  and  accelero- 
meter misalignment,  scale  factor,  and  bias  error. 


The  initial  alignment  algorithm  is  designed  to 
derive  the  maximum  benefit  from  the  alignment 
time  advantage  afforded  by  strapdown  compared  to 
gimbaled  systems,  not  requiring  a coarse  align 
mode  to  physically  level  the  inertial  reference 
(and  eliminate  g-sensitive  errors)  before  engaging 
the  sensitive  azimuth  alignment  loop.  Based  on  a 
Kalman  estimator  formulation,  the  alignment  filter 
can  erect  to  vertical  and  simultaneously  align  in 
azimuth  in  the  presence  of  gyro /accelerometer 
pulse  quantization  noise  and  0.  05  ft/s  aircraft  ac- 
celeration noise  to  an  accuracy  of  1 arc  minute  (in 
azimuth)  in  less  than  two  minutes  time  with  no 
a priori  knowledge  of  initial  aircraft  attitude.  The 
attitude  alignment  accuracy  of  LINS  is.  thereby, 
limited  only  by  instrument  error  (random  noise 
and  bias  error  in  the  laser  gyro  and  bias  trending 
in  the  accelerometer). 


LINS  CDU 


The  CDU  (Figure  12)  provides  the  capability  to 
operate  the  system  in  its  basic  operating  modes 
(standby,  align,  navigate)  either  aided  or  unaided, 
with  either  an  orthogonal  three-axis  nonredundant 
gyro  set  or  a skewed  redundant  four-gyro  config- 
uration. In  the  orthogonal  mode,  only  the  three 
orthogonal  gyro  signals  are  used  in  the  strapdown 
computation  and  the  system  operates  as  a true 
nonredundant  system.  If  the  redundant  mode  is 
selected,  the  system  uses  the  outputs  from  all 
four  gyros,  averaging  the  signals  to  obtain  the 
best  estimate  for  the  equivalent  three-axis  rate 
signals  for  the  strapdown  computer.  Only  the  non- 
redundant orthogonal  triad  mode  was  tested  in  May 


SOFTWARE  TESTING 

The  LINS  align  and  flight  mode  software  programs 
were  validated  in  two  steps  prior  to  system  level 
testing.  First,  the  HDC-301  programs  were 
tested  for  accuracy  and  round-off  error  propaga- 
tion by  use  of  a software  simulator.  The  simulator 
provides  both  the  "correct"  or  "reference"  solu- 
tion for  a given  set  of  simulated  gyro  and  accelero- 
meter inputs  and  the  corresponding  HDC-301  solu- 
tion. The  reference  solution  is  obtained  from  a 
FORTRAN  analog  of  the  attitude  reference  and 
navigation  equations,  and  the  HDC-301  solution  is 
obtained  from  a FORTRAN  simulation  of  the  HDC- 
301  machine  code  (the  FORTRAN  simulation  pre- 
serving all  of  the  salient  computational  character- 
istics such  as  precision,  word  length,  etc). 

While  this  test  is  extremely  valuable  in  itself,  it 
is  limited  (due  to  computer  run-time  constraints) 
to  periods  of  a minute  or  less  of  simulated  time. 

The  second  step  in  the  validation  process  is  in 
principle  the  same  as  the  first,  with  the  actual 
flight  computer  substituting  for  the  simulated 
HDC-301  program,  using  artificially  set  sensor 
inputs  to  simulate  the  sensor  signals  that  would  be 
measured  during  the  specified  flight  profile.  Here 
again,  a FORTRAN  reference  solution  is  used  as 
the  basis  of  comparison,  but  the  time  over  which 
the  two  solutions  can  be  compared  is  extended  to 
an  hour  or  more.  This  allows  much  greater  in- 
sight into  the  long-term  error  propagation  ten- 
dencies of  the  attitude  reference  and  navigation 
software. 


LASER  GYRO  TESTING 


During  the  last  quarter  of  1973,  a life  test  was 
initiated  on  the  newest  model  GG1300  laser  gyro 
(S/N  174)  to  establish  a performance  baseline 
against  which  continued  progress  in  laser  gyro 
development  could  be  judged.  The  data  in  Figure 
13  is  a plot  of  the  stability  measured  on  S/N  174 
since  initiation  of  the  life  test.  Over  3500  oper- 
ating hours  have  been  accumulated  on  the  gyro  to 
date.  Each  data  point  includes  at  least  3 hours  of 
gyro  off  time  in  a room  temperature  environment. 
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Some  data  points  also  include  thermal  cycling  and 
movement  of  the  gyro  to  diiierent  test  mounts. 
The  results  show  that  0.  01  deg/h  (equivalent  to 
1 nmi/h  system  performance)  long-term  bias 
stability  is  achievable  today  with  the  current 
GG1300  design. 


Similar  test  data  (Figure  14),  including  accuracy 
measurements  while  under  temperature  and  vibra- 
tion exposures,  was  taken  on  the  four  laser  gyros 
(Serial  Numbers  9,  10,  11,  12)  used  in  the  LINS 
engineering  hardware  ISA.  The  data  in  Figure  14 
depicts  the  bias  shift  of  the  gyros  from  their 
original  calibrated  values  (before  test  initiation) 
for  temperature  ranges  of  CPF  to  160  F and  for 
±lg  20-2000  Hz  continuous  vibration  exposure. 

The  data  shows  that  the  laser  gyro  accuracy  is 
within  a ±0.  02  deg/h  band  for  all  gyros,  and  with- 
in a 0.  01  deg/h  band  for  two  of  the  gyros  for  the 
environmental  range  and  duration  period  of  the 
tests.  On  the  basis  of  this  data,  Honeywell  ex- 
pected to  demonstrate  LINS  navigation  accuracy 
of  1-2  nmi/h  CEP  in  the  Holloman  May-June 
1975  flight  tests. 
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Figure  13.  C.G1300  Long-Term  Stability 


Figure  14. 


GC.1300  S/N  9-12  Bias  Stability 


CALIBRATION  AND  STATIC  LAB  TESTING 

Calibration  of  the  system  sensor  components  al- 
lows precise  compensation  within  the  flight  com- 
puter software  for  various  sensor  anomolies.  The 
gyros  and  accelerometers  are  calibrated  to  deter- 
mine bias,  scale  factor,  and  misalignment  errors. 
In  addition,  the  gyro  temperature-dependent  bias 
coefficients  and  the  accelerometer  temperature- 
dependent  scale  factor  coefficients  are  determined. 
Once  the  sensor  errors  are  known  and  are  properly 
compensated  for  in  the  system  software,  testing  of 
the  fully  integrated  system  can  begin  in  a labora- 
tory environment.  The  laboratory  tests  are 
comprised  of  sample  alignments  at  all  points  of 
the  compass  and  stationary  navigation  runs  follow- 
ing each  alignment. 

The  RMS  heading  error  profiles  for  five  consecu- 
tive LINS  laboratory  alignment  sequences  are 
shown  in  Figure  15  for  north  and  east  ISA  orienta- 
tions. The  predominant  disturbing  influence 
affecting  the  alignment  convergence  in  these 
results  is  gyro  random  walk.  The  system  under 
test  had  0.  0035  deg/h1/2  in  the  Y-axis  gyro  and 
0.  008  deg/h1 ' 2 in  the  X-axis  gyro,  which  is 
clearly  manifested  by  a more  rapid  alignment 
convergence  when  the  Y axis  is  pointing  east. 

These  results  are  representative  of  the  normally 
expected  range  of  alignment  convergence  times 
for  the  1975  LINS  flight  test  system.  For  today's 
GG1300  laser  gyro  technology,  0.  005  deg/h1/2 
is  typical  of  random  walk  error  (between  North  and 
East  results  in  Figure  15).  Faster  convergence 
performance  will  be  more  typical  of  future  LINS 
systems  with  the  benefits  of  improved  gyro 
performance  through  production  learning. 
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Figure  15.  LINS  Azimuth  Alignment  Angle  vs. 

Alignment  Time  for  Five  Alignment 
Sequences  with  North  and  East 
System  Headings 


VAN  TESTING 

Van  testing  of  the  LINS  system  (in  the  three-axis 
orthogonal  gyro  mode)  was  carried  out  over  a one 
month  period,  during  which  eight  navigation  runs 
were  conducted  and  performance  analyzed.  As  a 
preliminary  to  the  van  testing,  a set  of  detailed 
county  road  maps  for  the  Minneapolis  area  were 


used  in  deriving  the  latitude  and  longitude  of  easily 
identifiable  landmarks  (bridges,  overpasses,  inter- 
sections, etc.  ).  Three  routes  were  selected  for 
van  testing:  the  first  was  almost  due  north,  the 
second  almost  due  east,  ana  the  third  was  a closed 
circuit  on  the  Twin  City  freev  ay  system. 

During  actual  van  testing,  the  LINS  latitude  and 
longitude  was  recorded  as  each  landmark  was 
passed  and  was  compared  with  the  landmark  lati- 
tude and  longitude,  giving  a series  of  position 
errors  as  a function  of  elapsed  time.  Checkpoints 
were  chosen  such  that  an  error  measurement 
would  be  available  every  five  minutes  on  the  aver- 
age. The  duration  of  a typical  van  test  was 
approximately  84  minutes  (one  Schuler  period), 
with  the  longest  run  being  about  3 hours.  A bulls- 
eye  plot  of  navigation  errors  at  84  minutes  (error 
at  84  minutes  divided  by  time)  is  shown  for  the 
series  of  eight  van  tests  in  Figure  16.  The  med- 
ian radial  error  of  0.  82  nmi/h  at  84  minutes  for 
the  van  runs  (see  Figure  16)  is  representative  of 
the  CEP  at  84  minutes,  and  also  the  mean  CEP 
growth  rate  for  the  system  since  oscillatory  error 
terms  tend  to  be  at  null  at  one  Schuler  period. 
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Figure  16.  Bulls-Eye  Plot  of  LINS  Van  Test 
Navigation  Errors  at  84  Minutes 


HOLLOMAN  TEST  CONDITIONS 

The  LINS  engineering  hardware  (3-axis  orthogonal 
gyro  mode  configuration)  was  delivered  to  Holloman 
Air  Force  Base  on  April  14,  1975.  Final  system 
calibrations  were  completed  on  April  16,  1975. 
From  April  16,  1975  until  completion  of  the  Hollo- 
man test  program  on  July  14,  1975,  no  system 
calibrations  were  performed.  Over  2 68  operating 
hours  were  accumulated  on  the  system  during  the 
test  period  (including  82  aircraft  navigation  oper- 
ating hours  and  65  aircraft  navigation  flight  hours) 
with  no  system  failures. 

All  system  tests  were  performed  without  tempera- 
ture controls.  For  the  C-141  flights,  approxi- 
mately 40°F  temperature  variations  were  experi- 
enced during  the  tests  (high  aircraft  internal  temp- 
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erature  at  system  turn-on  on  the  ground  followed 
by  cool-down  to  70“F  or  lower  after  the  engines 
were  started  and  aircraft  air  conditioning  systems 
began  operating). 


All  system  test  runs  were  initiated  from  a cold 
condition  (preceeded  by  at  least  3 hours  of  system 
off  time).  All  system  runs  entered  the  navigate 
mode  after  20  minutes  from  turn-on  (10  minutes 
for  warm-up  and  10  minutes  for  alignment).  An 
exception  was  the  eighth  flight  test  run  where  an 
extended  warm-up  period  (50  minutes)  was  needed 
for  memory  loading  procedures. 


HOLLOMAN  LAB  TESTING 


As  a preliminary  to  the  Holloman  C-141  flight 
tests,  a series  of  both  fixed  and  moving  base  tests 
were  conducted  at  Holloman  Air  Force  Base. 

The  tests  were  grouped  into  four  categories: 


• Static  - Navigational  accuracy  is  deter- 
mined for  a fixed-base  condition. 


Scorsby  - Navigational  accuracy  is  deter- 
mined when  the  base  has  a ±3°  circular 
coning  motion  at  6 rpm. 


• Static  Heading  Sensitivity  - The  effect  of 
periodic  heading  changes  on  navigational 
accuracy  is  determined  for  a fixed-base 
condition. 


• Scorsby  Heading  Sensitivity  - The  effect  of 
periodic  heading  changes  on  navigational 
accuracy  is  determined  for  Scorsby  base 
motion  (described  above). 


All  tests  were  6 hours  in  duration  and  began  after 
a 10-minute  warm-up  and  10-minute  alignment. 

A summary  of  navigational  accuracy  determined 
for  the  series  of  lab  tests  is  shown  in  Table  1. 


Table  1.  Holloman  Lab  Test  Results 


Date 

Test  Type 

End  Point 
Error  Kate 
(Radial  Error 
At  6 Hrs 
i fi> 

(nmi  / h) 

May  1 

Static 

■ 

0.  5 

May  2 

Scorsby 

1.  35 

May  8 

Static 

0.  83 

May  8 

Static  HDG  Sensitivity 

0.  25 

Mav  9 

Scorsbv  HDG  Sensitivity 

1.  37 

May  9 

Scorsby  HDG  Sensitivity 

0,  45 

HOLLOMAN  FLIGHT  TESTS 


Flight  testing  of  the  LINS  system  was  conducted  at 
Holloman  Air  Force  Base  in  a C-141  aircraft  dur- 
ing the  period  from  May  14  to  June  27,  1975.  A 
total  of  13  flight  tests  were  carried  out  at  three 
Air  Force  facilities:  Holloman  Air  Force  Base 
(Almagordo,  New  Mexico);  Elmendorf  Air  Force 
Base  (Anchorage,  Alaska);  and  Eielson  Air  Force 
Base  (Fairbanks,  Alaska).  Table  2 gives  a gener- 
al description  of  the  13  flight  test  profiles. 


All  system  alignments  were  performed  inertially 
with  no  a priori  knowledge  of  coarse  heading.  No 
external  optical  alignment  devices  were  used  in 
alignment  sequence  and  the  only  external  input  to 
the  system  during  the  test  program  was  barometric 
altitude  provided  in  the  C-141  for  altitude  channel 
stabilization. 


Navigational  errors  for  the  LINS  system  were 
established  on  each  flight  by  periodic  comparisons 
(typically  about  once  every  5 minutes)  of  the  navi- 
gator's indicated  position  and  the  knov.n  position  of 
a checkpoint  being  traversed.  This  provided  a set 
of  "quick  look"  results  which  was  subsequently  re- 
fined using  a photograph  of  each  checkpoint  as  it 
was  traversed.  The  photograph  is  necessary  be- 
cause the  checkpoints  are  not  traversed  exactly. 
The  adjusted  checkpoint  position  errors  also  pro- 
vide the  data  base  for  deriving  LINS  velocity  error 
histories  for  each  flight  by  using  a Holloman  data 
smoothing  program. 


Table  2.  LINS  Flight  Test  Profiles 


Flight 

Test 

Location 

Align 

Orientation 

Flight 

Path 

Flight 

Time 

Na  v 

Time 

iHra) 

1 

Holloman  (N.  M)  | 

X 

1 X-S 

4 17 

2 

Holloman  (X.  M) 

X 

W-E 

6.  13 

7.  67 

3 

Holloman  (X.  M)  | 

N 

N-S 

2.  97 

4.  17 

4 

Holloman  (X.  M 1 

X 

W-E 

6.  05 

8 00 

5 

Holloman  (X  M.)to 
Elmendorf  (ALAS. 

X 

\ fW 

9.  17 

10.  37 

6 

Elmendorf  (ALASJ' 

E 

x-s 

3.  00 

4.  25 

7 

Elmendorf  (ALAS.l 

E 

X-S 

3.  18 

4.  67 

8 

Elmendorf  (ALAS.l 

X 

W-E- 

W-E 

7.  13 

8.  00 

9 

Eielson  (ALAS.  ) 

X 

W-E 

2.  93 

4.  33 

10 

Eielson  (ALAS.  ) 

X 

W-E 

2.  85 

3.  92 

11 

Eielson  (ALAS.  ) 

X 

x-s- 

1 N-S 

6.  98 

8.  33 

12 

Eielson  i ALAS.l  to 
Holloman  (X.  M.) 

X 

| S/E 

10.  23 

11.  50 

13 

| Holloman  X . M. 

N 

| Clr* 
| cling 

| 1.  35 

3.  00 

Summary  Data 

Total  f 

lours 

84  80 

- J 

82.  38 

Two  methods  were  used  at  Honeywell  to  compute  a 
figure  of  merit  for  position  error  growth  rate. 

The  first  method  was  recommended  by  NASC 
(Naval  Air  Systems  Command)  and  is  the  same  as 
that  used  to  evaluate  the  CAINS  (Carrier  Aircraft 
INS)  system  (Reference).  The  method  is  described 
in  the  following  steps: 


Performance  figures  given  in  this  paper  do  not 
constitute  the  official  results  of  the  flight  test  (to 
he  published  subsequently  bv  Holloman)  and  in 
some  cases  are  based  on  "quick-look"  data. 
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" * 


1)  The  radial  error  is  computed  at  each  of  the 
available  checkpoints. 


2) 


5) 


Error  rates  are  computed  at  each  check- 
point by  dividing  the  radial  error  by  the 
elapsed  time  since  entering  the  navigation 
mode. 


3) 


The  error  rates  occurring  at  two  succes- 
sive checkpoints,  which  are  separated  by 
less  than  0.  1 hour,  are  averaged  and  con- 
sidered to  be  one  value  halfway  between  the 
two  time  points. 


4)  Error  rates  for  each  flight  are  ordered 
from  the  smallest  value  to  the  highest. 


The  50-percentile  error  rate  for  each  flight 
is  chosen  as  that  value  which  is  halfway 
down  the  ordered  set.  Interpolation  is  used 
as  required. 


6) 


The  90-percentile  error  rate  for  each 
flight  is  chosen  as  the  value  which  is  90 
percent  down  the  ordered  set.  Interpola- 
tion is  used  as  required. 


7) 


The  data  from  flights  are  then  mixed  to- 
gether in  groups  according  to  the  number 
of  checkpoints  in  each  flight.  The  group- 
ings are  as  follows: 


Group 


Number  of  Checkpoints 
in  Each  Flight 


A 

13 

C 

D 

E 

F 

G 

II 

I 


2-4 

5-7 

8-11 

12-17 

18-25 

26-36 

37-52 

53-74 

75-105 


8)  Steps  (4)  and  (5)  are  repeated  for  each 
group  to  yield  a 50-percentile  and  90- 
percentile  number  for  the  group. 


9)  An  overall  50-percentile  and  90-percentile 
number  for  the  system  is  computed  from 
t!  values  for  the  groups  as: 


P50  ENG)  -VI>P50m- 


P90  d(T)[SN(I)P90(I)] 


where 
F 


50 


overall  50-percentile  error  growth 
rate 


‘ 90 

N(t) 


overall  90-percentile  error  growth 
rate 


number  of  flight  in  Ith  grouping 


" ..  . : wgrr 


P_g(I)  ~ 50-percentile  value  for  Ith  grouping 

Pg0<I)  90-percentile  value  for  Ith  grouping 

The  results  of  the  above  procedure  is  shown  in 
Table  3 for  the  LINS  flight  test  data.  Data  from 
only  the  first  twelve  flights  were  used.  The 
thirteenth  flight  test  did  not  yield  valid  position 
reference  data  for  comparison  due  a procedural 
problem  on  the  C-141. 

The  second  method  of  processing  the  position 
error  data  is  by  using  a conventional  ensemble 
statistical  approach.  In  this  method,  the  follow- 
ing steps  are  followed. 


Table  3.  Fifty  and  Ninety  Percentile  Radial 
Position  Error  Rates  for  Twelve 
LINS  Flight  Tests.  (CAINS  Formula) 


Position  Error  Kate 

Flight 

Checkpoints 

of 

No. 

50 

Pc  rcentile 
(nmi  / h > 

90 

Percentile 
(nmi  h) 

1 

23 

0.  62 

1.  08 

2 

27 

0.  46 

0.  93 

3 

26 

0 44 

1.  04 

4 

28 

0.  56 

1.  13 

5 

30 

0.  71 

1.  05 

6 

19 

1.  63 

3.  06 

7 

23 

1.  40 

1.  70 

8 

34 

0.  53 

1.  21 

9 

22 

0.  41 

1.  05 

10 

16 

0.  67 

2.  41 

11 

29 

0.  77 

1.  30 

12 

43 

0.  86 

1.  62 

Group 

Flights 

In 

Group 

50 

Pe  rc  entile 
(nmi  / h > 

90 

Percnntile 
(nmi  /h' 

D 

10 

0.  67 

2.  41 

E 

1.  «.  7.  9 

0.  91 

l.  91 

F 

2.  3,  4,  5, 
8.  11, 

0.  53 

1.  13 

G 

12 

0.  86 

1.  62 

Total 

0.  70 

1 54 

1)  The  radial  error  is  computed  at  each  of 
the  available  checkpoints. 

2)  The  radial  errors  occurring  at  two  suc- 
cessive checkpoints,  which  are  separated 
by  less  than  0.  1 hour,  are  averaged  and 
considered  to  be  one  value  halfway  be- 
tween the  two  time  points. 
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where 


<► 


3)  At  each  time  point  (between  0 and  8 hours), 
the  ensemble  of  radial  errors  for  all  flights 
is  ordered,  from  the  smallest  to  the  highest, 
from  which  50-percentile  and  90-percentile 
values  are  computed.  The  time  points  are 
separated  by  0.  1-hour  increments.  Interpola- 
tion between  actual  checkpoint  data  is  used 

as  required. 

4)  A least- squares  straight  line  fit  to  the  50- 
percentile  and  90 -percentile  radial  error 
ensemble  results  is  carried  out.  The 
slope  of  the  best  fit  straight  line  can  be 
considered  as  the  radial  error  growth  rate. 


The  results  for  the  second  method  are  shown  in 
Figure  17.  [t  should  be  noted  that  the  radial  error 
growth  rates  compare  reasonably  well  with  those 
given  in  Table  3. 
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X 
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V) 

o 
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Figure  17.  Fifty  and  Ninety  Percentile  Flight 
Test  Ensemble  Radial  Position 
Errors  as  a Function  of  Navigation 
Times 


Velocity  errors  for  inertial  navigation  systems 
are  generally  larger  than  the  average  position 
error  rate  due  to  excitation  of  Schuler  oscillations. 
The  velocity  errors  can  be  conveniently  character- 
ized by  an  RMS  value.  An  RMS  value  for  each 
axis  can  be  computed  for  a given  flight  from: 


where 

O - RMS  velocity  error  (north  or  east) 

6V.  = instantaneovis  velocity  error  at  ith 

1 time  point  in  the  flight 

N total  number  of  points  in  the  flight 


The  total  RMS  value  for  an  ensemble  of  flights  is 
computed  from : 


' TOT 


= total  RMS  velocity  error  (north  or 
VTOT  east) 

cry  RMS  velocity  error  for  Ith  flight 

(north  or  east) 

N(I)  = number  of  velocity  errors  for  the 
Ith  flight 

It  is  easy  to  verify  that  the  above  expression  yields 
the  same  result  that  would  be  obtained  if  the 
velocity  errors  for  each  flight  were  mixed  together 
without  any  distinction. 

The  velocity  errors  for  the  LINS  flight  testing  as 
noted  earlier,  were  derived  from  smoothed  posi- 
tion error  information,  which  was  available  at 
5 -minute  intervals  except  during  overwater 
segments.  The  RMS  velocity  errors  over  the 
first  3 hours  of  flight  using  the  described  proce- 
dure are  given  in  Table  4 for  flights  1 through  1 1 
individually,  and  as  a total  ensemble  (due  to  pro- 
cedural problems  on  the  C-141,  data  from  flights 
12  and  13  was  not  considered  valid  for  accu- 
rate velocity  reference  determination  and  was 
excluded  for  velocity  error  analysis). 

Table  4.  RMS  North  and  East  Velocity  Errors 
for  Eleven  LINS  Flight  Tests 


Flight 

No. 

Of 

Samples 

R.MS 

North 

\ elocitv 
Error 

(ft  1 SPC  * 

RMS 
East 
Velocity 
Error 
(ft  1 sec  > 

1 

36 

3.  6 

6.  2 

2 

25 

3.  7 

3.  2 

3 

36 

I.  9 

2.  8 

4 

33 

7 2 

2.  9 

5 

36 

3.  4 

4.  2 

6 

36 

11.  4 

6.  4 

7 

36 

3.  3 

3.  5 

8 

36 

5.  7 

6.  3 

9 

36 

5 2 

5.  4 

10 

36 

8.  0 

6.  1 

11 

36  . 

4.  5 

5.  6 

Total 

382 

5.  9 

5.  n 

A second  method  of  processing  the  velocity  error 
data  is  by  ensemble  processing.  This  method  of 
processing  yields  a greater  understanding  of  the 
time  dependency  of  the  velocity  errors.  At  each 
5-minute  time  point  (between  0 and  3 hours),  an 
RMS  value  is  computed  for  each  axis  using  the 
instantaneous  velocity  errors  in  the  ensemble  of 
flights.  Each  flight  is  used  only  during  periods 
when  checkpoint  data  was  available,  and  interpola- 
tion is  not  utilized  during  overwater  segments. 

The  time-dependent  RMS  velocity  errors  are  shown 
in  Figure  18. 
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Figure  18.  Holloman  Flight  Test  Ensemble 
RMS  Velocity  Errors  vs.  Time 


TEST  RESULTS  ANALYSIS 

Analysis  of  the  LINS  test  results  demonstrates  that 
the  inertial  positioning  accuracy  achievable  with 
current  technology  GG1300  laser  gyros  (Table  3 
and  Figure  17)  is  well  within  the  classical  1-2 
nmi/h  CEP  envelop  requirement  for  inertial 
navigation  equipment.  The  measured  inertial 
velocity  accuracy  (Table  4 and  Figure  18)  of  5.  5 
fps  RMS  per  axis  (RMS  average  for  first  3 hours) 
and  7.  5 fps  RMS  at  3 hours  is  acceptable  for  many 
applications,  but  will  be  improved  in  future  LINS 
design  configurations  to  better  satisfy  overall 
military  weapons  delivery  requirements  (3  to  5 fps 
RMS  desired).  These  improvements  will  be  rea- 
lized in  the  future  through  a reduction  of  errors  in 
three  primary  areas:  laser  gyro  random  walk, 
laser  gyro  thermal  gradient  error  (transient  bias 
shifts  induced  by  aircraft  internal  ambient  tempera- 
ture changes),  and  sensor-to-sensor  alignment 
uncertainties. 

Laser  gyro  random  walk  error  will  improve  with 
learning  as  gyro  producibility  is  developed  for 
large-scale  manufacturing.  Reduction  of  gyro 
thermal  transient  sensitivity  by  a factor  of  five 
has  already  been  demonstrated  on  recent  laser 
gyro  design  configurations.  This  is  the  magnitude 
of  improvement  needed,  not  only  for  transport- 
type  aircraft  application  where  40°F  temperature 
transients  appear  (as  in  the  C-141  at  Holloman), 
but  also  for  fighter  aircraft  where  thermal  tran- 
sients of  100  ’F  can  be  induced  during  large  alti- 
tude change  maneuvers.  In  addition,  to  reduce  the 
magnitude  of  thermal  gradients  induced  across  the 
gyros  in  future  LINS  configurations,  ISA  thermal 
design  will  concentrate  on  thermally  isolating  the 
sensor/mount  assembly  from  internally-induced 
system  electronics  heat,  and  ensuring  symmetrical 
heat-flow  paths  between  internal  and  external  sys- 
tem environments. 

Sensor-to-sensor  alignment  instabilities  in  the 
LINS  engineering  hardware  are  caused  by  two 
effects:  1)  the  large  single  casting  in  the  ISA  that 
serves  the  dual  function  of  sensor  mount  and  ISA 
case,  and  2)  stresses  induced  in  the  ISA  casting 
by  the  gyro/mount  interface.  The  first  effect 
allows  ISA  large  spanwise  loads  (induced  by  thermal 


gradients  and  mechanical/inertial  stresses)  to  dis- 
tort the  casting  and  sensor-to-sensor  alignments. 
New  LINS  design  configurations  will  use  an  isolated 
sensor  mount/casting  that  installs  into  the  INS 
case  to  eliminate  this  error  mechanism.  The 
second  effect  is  created  by  tne  four  gyro  case 
corner  tie-downs  (see  Figure  2)  used  to  inhibit 
gyro  case  vibration.  The  gyro  input-axis  align- 
ment surface  is  a polished  flat  at  the  base  of  the 
center  post  of  the  instrument  (see  Figure  2).  The 
principal  gyro  mechanical  interface  with  the  ISA  is 
a bolt  through  the  gyro  center  post  that  interfaces 
the  gyro  center  post  flat  with  a mating  reference 
flat  on  the  ISA  sensor  block.  Anchoring  the  four 
gyro  case  corners  after  the  center  post  is  torqued 
down  introduces  distortion  stresses  into  the  ISA 
casting.  In  future  LINS  configurations,  the  sensor 
case  interface  with  the  sensor  mount  casting  will 
be  achieved  using  flexible  tiedowns  that  have  suf- 
ficient damping  to  eliminate  case  vibrations  with- 
out introducing  spurrious  stresses  into  the  sensor 
casting. 


CONCLUSIONS 


Laboratory,  road,  and  flight  tests  conducted  with 
LINS  engineering  hardware  in  1975  have  demon- 
strated the  ability  of  today’s  laser  gyro  strapdown 
technology  to  meet  basic  military  inertial  naviga- 
tion performance  requirements.  Producibility  and 
reliability  development  is  now  required  to  realize 
the  projected  cost  advantages  of  strapdown  laser 
gyro  technology  in  military  production  applications. 
Honeywell  is  currently  under  contract  with  the 
Naval  Air  Systems  Command  (NASC)  for  laser 
gyro  producibility /reliability  development  and 
fabrication  of  a single  oackage  laser  gyro  navi- 
gator advanced  development  unit  (sensors,  com- 
puter, memory,  power  supply  in  a single  chas- 
sis) for  reliability  and  performance  evaluation 
over  full  military  environments  in  ti  ansport, 
patrol,  fighter,  or  rotary-wing  aircraft,  for 
both  land  based  and  stringent  sea  based  (carrer 
alignment,  catapault  launch,  and  landing  arrest)  • 
operation.  The  advanced  development  hard- 
ware program  will  provide  baseline  system 
reliability  and  maintainability  data  for  subse- 
quent production  development  programs  to 
ensure  that  the  maximum  cost-of-ownership 
potential  is  achieved  with  laser  gyro/ strapdown 
technology  in  future  military  applications. 
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THE  FLEXURE  JOINT  PRINCIPLE  OF  OPERATION  OFFERS  A 
TWO-DEGREE  Of  FREEDOM  GYROSCOPE  VERSES  A ONE -DEGREE 
OF  FREEDOM  R LG, 


BRIEFING  TITLE 


TACTICAL  MISSILE  GUIDANCE  SYSTEM 


ARTHUR  F.  CARBERT 


Mr.  Carbert  received  a BS  in  ME  in  1962  and  a Master's  in  1967  from 
the  University  of  Minnesota.  He  joined  Honeywell  in  1959  and  is  a 
Principal  Development  Engineer  at  the  Aerospace  Division  in  St. 
Petersburg,  Florida.  He  has  been  involved  in  many  Guidance  and  Control 
System  Developments  including: 


ATHENA-H 


BURNER  II 


SCOUT 


JAPAN'S  ASM 


Mr.  Carbert  presently  directed  the  technical  applications  of  the  H478 
Inertial  Navigation  System. 


H-478F/HDC-301  APPLIED  TO  TACTICAL  WEAPONS 


1.0  INTRODUCTION 

Key  features  of  tactical  weapons  were  identified  by  the  most 
primitive  cultures.  Even  rocks  thrown  at  wild  animals  represent 
key  features  of  tactical  weapons,  i.e.,  normally  plentiful,  small 
enough  to  be  easily  handled  and  quickly  deployed,  could  be  stock- 
piled at  strategic  locations,  were  expendable,  and  were  obviously 
effective  in  the  right  circumstances.  Technology  has  permitted 
the  rock  to  be  replaced  by  archery,  bows  and  arrows  to  be  replaced 
by  guns,  small  arms  to  be  replaced  by  artillery,  cannons  to  be 
replaced  by  tanks,  wheeled  vehicles  to  be  replaced  by  missiles. 

Today's  tactical  weapon  technology  seems  to  be  evolving  into 
sophisticated  combinations  of  ground,  sea,  and  air  vehicles  all 
using  some  form  of  tactical  weapon  support  for  achievement  of 
military  objectives.  Despite  the  complexity  of  this  technology, 
the  basic  features  of  tactical  weapons  remain  virtually  unchanged; 
it  is  still  important  to  have  small,  easily  stored  and  quickly 
deployed,  expendable,  but  effective  weapons. 

One  of  the  most  dramatic  technological  advances  of  the  last  decade 
has  been  in  electronic  packaging.  The  use  of  operational  amplifiers, 
integrated  circuits,  and  hybrid  electronics  has  permitted  the  replace- 
ment of  discrete  components  with  attendant  savings  in  terms  of  size, 
weight,  power,  and  cost.  This  miniaturization  has  enhanced  the 
development  of  tactical  weapons  and  permitted  the  employment  of 
more  sophisticated  tactical  guidance  and  control  approaches  while 
preserving  the  small  size,  weight,  and  deployment  characteristics. 
Strapdown  inertial  guidance  and  control  systems  are  especially 
suited  to  tactical  weapons  because  they  provide  the  following 
advantages: 

• Strapdown  generally  provides  for  the  lowest  overall  weight, 
size,  and  highest  reliability. 

• Strapdown  permits  the  greatest  packaging  flexibility. 

• Strapdown  simplifies  the  control  system  mechanization  by 
eliminating  the  requirement  for  a separate  autopilot  rate 
gyro  unit. 

Honeywell  has  developed  a small,  versatile  strapdown  system  con- 
sisting of  an  H-478  Inertial  Sensor  Assembly  (ISA)  and  companion 
HDC-301  computer  for  use  in  tactical  missiles  and  related  applica- 
tions. The  H-478  ISA  was  successfully  applied  to  the  USAF  SHAG 
(Simplified  High  Accuracy  Guidance)  Program  which  demonstrated 
helmet  sight  target  acquisition  with  strapdown  inertial  guidance 
for  a FALCON  missile  launched  from  under  the  wing  of  an  F101 
aircraft. 


Currently,  the  H-478  technology  is  being  applied  to  a tactical 
Air-to-Ship  Missile  (ASM)  for  JAE  (Japan  Aviation  Electronics) , 
an  application  similar  to  the  USN  Harpoon  program.  For  the  ASM, 
the  H-478  has  been  modified  to  fit  a unique  form  factor  and 
features  the  Honeywell  HDC-301  computer.  ASM  functions  performed 
by  the  H-478/HDC-301  include  providing  rate  and  attitude  signals 
to  the  Autopilot,  Guidance,  blending  of  accelerometer  and  altimeter 
signals  for  vertical  flight  control,  initialization  of  guidance 
system,  mode  control  and  command  for  vehicle  subsystems,  mode 
sequencing  for  ignition,  separation,  arming,  and  destruct.  Sup- 
porting software  modules  including  special  mode  controls,  coordinate 
transformation  and  in-flight  alignment  have  also  been  developed  for 
the  H-478/HDC-301  inertial  system. 

The  current  all-up,  off-the-shelf  INS  consists  of  an  H-478B  ISA  and 
HDC-301  computer  unit.  Its  features,  along  with  the  features  of  a 
SHAG  ISA  and  the  ASM  system,  are  contrasted  in  Table  1 with  typical 
requirements  for  tactical  missile  guidance  equipment.  The  remainder 
of  this  paper  examines  the  H-478F  ISA  and  HDC-301  computer  illus- 
trating the  features  which  make  the  INS  or  its  individual  devices 
suitable  for  other  applications  which  require  performance  in  the 
2 to  10  degree/hour  class. 


TABLE  1.  H-478  AND  TACTICAL  GUIDANCE  REQUIREMENTS 


H-478  Specifications 


Weapon  Guidance 
Requirements 

SHAG 

Configuration 

ASM 

Configuration 

H-478F/HDC-301 

Configuration 

H-478B  ISA  only 

GG8105  ISA 
BG8105  Comp 

H-478F  ISA 
BG8105  Comp 

Small  Size  (Volume) 
(Less  than  750  in3) 

250  in3  - 

415  in3 

525  in3. 

(4097  cnT) 

(6800  an  ) 

8603  cm; 

Small  Weight 

5.0  lb 

15.60  lb 

18.0  lb 

(15-25  lb) 

2.3  Kg 

7.1  Kg 

8.2  Kg 

Quick  Reaction  Time 
(30  sec  to  15  min) 

<15  min 

<10  min 

<15  min 

1 min  w/degrad- 
ed  performance 

Low  Power  Consump- 
tion (50-100  watts) 

<35  watts 

<65  watts 

<65  watts 

2.0  INERTIAL  SENSOR  ASSEMBLY 

The  present  configuration  of  the  H-478F  ISA  is  depicted  in  Figure  1. 
Three  Honeywell  GGllll  rate  integrating  gyros  and  three  Sundstrand 
Q-Flex  accelerometers  are  mounted  in  a thermally  controlled  aluminum 
block.  The  block  is  vibration-isolated  from  the  extruded  aluminum 
chassis.  All  electronics  and  power  supply  mount  vertically  in  the 
same  chassis  and  are  interconnected  with  a double-sided  intercon- 
necting board.  End  plates  and  a simple  wraparound  cover  complete 
the  housing.  An  optical  reference  is  provided  on  the  block  for  bore- 
sighting and  view  ports  are  provided  through  the  cover  and  end  plate. 

Figure  2 is  a simplified  functional  block  diagram  for  the  H-478F. 

The  gyros  and  accelerometers  sense  three  axis  rotations  and  trans- 
lation. Analog  rebalance  signals  are  conditioned  to  provide  body- 
sensed  analog  rate  and  acceleration  inputs.  In  addition,  a signal 
proportional  to  the  rebalance  torque  is  fed  into  an  integrator  which 
is  reset*  whenever  a precise  attitude  change  occurs.  A fixed  pre- 
cision output  pulse  occurs  simultaneously  with  reset  resulting  in 
a train  of  attitude  change  pulses  which  occur  at  a rate  proportional 
to  the  sensed  rate  or  acceleration.  Nominal  device  scale  factors 
are  as  follows: 


Max  Pulse  Digital  Scale 
Rate  Factor 


Analog  Scale 
Factor 


Acceleration 
(X,  Y,  Z) 


12.8  kHz 


0.0615  fps/pulse  5.3  mv/ft/sec" 


Rate  (X , Y , Z ) 


12.8  kHz 


62  arc-sec/pulse  30  mv/deg/sec 


The  ISA  electronics  depicted  in  Figure  2 comprise  the  following 
functions : 


• Analog  Loop.  Maintains  the  accelerometer  pendulum  or  gyro 
gimbal  at  null  while  providing  precision  acceleration  or 
angular  rate  information  to  the  digitizer.  The  accelerometer 
loop  is  integral  to  the  sensor. 

• Digitizer.  Provides  output  pulses  as  a function  of  the  time- 
integral  of  the  analog  loop  output  voltage. 

• Precision  Pulser.  Provides  precision  reference  pulse  train 
for  each  digitizer . 

• Countdown  Logic . Provides  precision  timing  pulses  for  the 
precision  pulser  and  digitizers,  and  provides  reference 
waveforms  for  the  gyro  spin  motor  and  signal  generator 
excitation  supplies. 


Not  c.  tr  ie  reset  but  a "summed"  rebalance  pulse. 
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FIGURE  2 


Spin  Motor  Supply.  Provides  square  wave  power  to  all  three  , 
synchronous  speed  gyro  spin  motors. 


<» 


• Signal  Generator  Supply.  Provides  sinusoidal  waveform  power 
for  the  three  gyro  signal  generators. 

• Thermal  Control.  Controls  inertial  component  block  tempera- 
ture to  the  degree  required  to  satisfy  mission  needs. 

• DC  Power  Supply.  Provides  dc  supply  voltages  for  all  assem- 
blies except  heater  power. 

Significant  fabrication,  assembly  and  test  techniques  used  include: 

• Conventional  double-sided  printed  circuit  boards. 

• Wave  soldering  of  printed  circuit  assemblies. 

• Simplified  extruded  chassis  construction. 

• Plug-in  boards  for  ease  of  electrical  test  and  maintenance. 

• Automatic  functional  acceptance  test  using  a precision  Goerz 
test  facility  and  a Honeywell  H-316  computer. 

Performance  of  the  ISA  depends  on  the  dynamics  of  the  specific  appli- 
cation. The  performance  terms  of  Figure  3 provide  a list  of  param- 
eters and  their  specification  values  which  permit  the  generation  of 
an  error  analysis  for  given  missions.  Alternate  sensors  also  exist 
which  can  be  used  in  the  H-478F  without  changing  sensor  mounting  or 
electrical  interface.  For  example,  GGllll  gyros  with  drift  stabi- 
lity of  ±1  degree/hour  (±2  degree/hour/g)  and  rate  capability  of 
less  than  50  degrees/second  are  available.  Alternatively,  gyros 
with  rate  capability  in  excess  of  400  degrees/second  and  drift 
stability  of  7 degrees/hour  (7  degrees/hour/g)  are  also  available. 
Accelerometers  with  a bias  of  200  yg  can  be  incorporated  into  the 
accelerometer  channel  if  needed  for  specific  applications. 

Several  sensor  options  have  been  employed  in  the  various  ISA  con- 
figurations. However,  all  configurations  of  the  H-478  family  use 
the  same  basic  construction  techniques  and  electronic  circuits. 
Although  the  GG8105  ISA  for  JAE  has  been  repackaged  to  fit  a flat 
form  factor  of  20  by  26  by  5.1  cm,  the  sarim  components  and  circuits 
are  used.  In  all  configurations,  both  digital  and  analog  signals 
are  provided  to  simplify  autopilot  mechanization  and  reduce  computa- 
tional processing  requirements.  The  small  size  and  weight  of  these 
devices  are  exploited  for  tactical  weapon  applications. 
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Parameter 

Gyro  Channel  (Heated  Block) 

Max  Continuous  Rate 

G-Insensi ti ve  Drift  Stability  (6  mo) 

G-Insensitive  Drift  Stability 
(Continuous  Operation) 

G-Sensitive  Drift  (6  mo) 

(Vector  Sum) 

G-Sensitive  Drift 
(Continuous  Ope  rat  ion) 

Anisoelastic  Coefficient 

Scale  Factor  Linearity 

Scale  Factor  Stability  (6  mo) 

A1 i gnment  Stabi 1 i ty 
Frequency  Response 

Accel  Channel  Performance  (Heated  B-Tock) 
Range 
Bias 

Bias  Stabi 1 i ty  (6  mo ) 

Bias  Stability  (continuous  operation) 
Cross  Coupling 
Rectification  Error 
Scale  Factor  Linearity 

Scale  Factor  Stability 
Scale  Factor  Asymmetry 
Frequency  Response 
Alignment  Stability 


Typical  Performance 
Value  (3  Sigma) 

220  degrees / second 
2 to  4 degrees/hour 

0.2  to  0.4  degree/hour 

±7  degrees/hour/g  max 

±1  degree/ hour/ g 

2 

±0.2  degree/hour/g 

±0.1  percent  FS  (0.02 
percent  to  10  degrees/ 
second ) 

±0.1  percent  ^ 

1 mr  wrt  Chassis 

f > 50  Hz 
n — 

0.5  < C < 1.0 

25  g 
±1  mg 
±1  mg 
10  yg 

10  by  10'6  g/g 
0.075  pg/g 

0 . 1 percent  FS  (0.01 
percent  to  1 g) 

0 . 1 percent 

0.05  percent 

> 100  Hz 

< 1 mr  wrt  Chassis 


FIGURE  3.  H-478F  PERFORMANCE  TERMS 
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3.0  H DC  - 30  1 COMPUTER  UNIT 


The  computer  configuration  shown  in  Figure  4 is  a compact,  low  power, 
low  cost,  general  purpose  computer  currently  being  applied  to  the  ASM 
and  to  other  customers.  It  is  a self-contained  unit  featuring  a MOS 
LSI  Central  Processing  Unit  (CPU);  three  I/O  boards,  two  memory 
boards,  and  a power  supply  housed  in  an  investment  cast  aluminum 
chassis.  Pertinent  characteristics  of  the  computer  are  shown  in 
Figure  5.  The  power  supply  is  located  in  the  base  of  the  chassis 
and  is  isolated  from  the  digital  electronics  section  by  a metal  shelf 
to  minimize  the  effects  of  EMI.  The  power  supply  operates  from  +28  vdc 
and  provides  all  power  required  by  the  digital  electronics  and  the 
GG8105  Inertial  Sensor  Assembly  used  in  the  ASM.  All  other  electronics 
including  CPU,  I/O  and  memory,  are  mounted  on  6 standard  size  printed 
circuit  boards  and  chassis  installed  using  Birtcher  card  guides.  With 
the  computational  speeds  shown  in  Figure  5 the  computer  provides  a 
throughput  capability  of  approximately  140  kops  for  a typical  avionics 
software  mix.  The  CPU  has  47  instructions,  1 hardware  index  register, 

16  bit  parallel  DMA  (Direct  Memory  Access) , 12  input/10  output  discretes, 
and  is  TTL  compatible  at  all  interface  circuits.  The  HDC-301  CPU 
(Figure  6)  is  a standard  product  which  was  fully  qualified  during  1974. 

The  CPU  has  been  widely  used  on  such  programs  as  Helmet  Sight  System, 

F-14  VTAS  (Visual  Target  Acquisition  System) , digital  autopilot  flight 
control  system,  and  Honeywell's  Laser  Inertial  Navigation  System  (LINS). 
The  CPU  is  capable  of  operation  with  up  to  16K  instruction  memory. 

The  memory  section  has  four  options: 

1.  Core  memory  (for  software  development) 

2.  Discrete  masked  ROM  for  large  production 

3.  One  time  programmable  memory  (PROM)  for  pilot  production 

4.  Electrically  alterable  memory  (EAROM)  for  semiconductor  appli- 
cations requiring  the  flexibility  of  program  alterations. 

Because  semiconductor  memory  preserves  the  compact  form  factor  and  low 
power  essential  to  tactical  weapons,  it  is  preferred  for  operational 
use.  Although  core  memory  could  be  used,  it  presents  a severe  size, 
weight,  and  power  penalty  to  the  device.  All  the  above  semiconductor 
memory  options  (2-4)  are  available  on  multilayer  printed  circuit  boards 
with  approximately  2 . 8K  words  per  board.  These  are  interchangeable 
at  the  board  level  regardless  of  semiconductor  type  selected.  Basi- 
cally the  memory  capacity  per  board  is  as  follows. 


Instruction  Constant  Data  RAM  (Scratchpad) 


ROM  (masked) 

2048 

X 

16 

bit 

words 

512  x 16  bit  words 

256 

X 

16 

bit 

words 

PROM 

2048 

X 

16 

bit 

words 

512  x 16  bit  words 

256 

X 

16 

bit 

words 

EAROM 

2048 

X 

16 

bit 

words 

1024  x 16  bit  words 

256 

X 

16 

bit 

words 

99 


i 
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BG8105  COMPUTER  CONFIGURMION 


memory 
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FIGURE  4 


Parameter 


Characteri Stic 


• Form  Factor/Size 


BG8105  Configuration 

3 

6.6  x 4.5  x 9.0  inches  (266  inches  ) 
16.7  x 11.3  x 22.8  cm  (4350  cm3) 


• Weight 

• Power 

• I/O  Section 

• Memory 


9.8  pounds  (4.5  kg) 

+28  vdc  Supply  (35  watts  - computer  only) 
16  Bit  Parallel 

Semiconductor-  PROM  (R0M)/RAM 

4096  x 16  Bit  Instruction 
1024  x 16  Bit  Constant 
512  x 16  Bit  RAM 


• CPU  Fabrication 


• Computation  Speed 


FIGURE  5. 


2 MHz  Crystal  (Precision  Frequency  Source) 
15  Custom  PMOS  LSIC  (Multiple  Sourced) 

28  Additional  Integrated  Circuits 
10  Layer  PC  Board 

5 psec  Add  Single  Precision 
21  psec  Multiply 
65  psec  divide 

Note:  With  optional  crystal,  40  percent 

improvement  available,  i.e.,  3.6 
psec  add,  etc. 

HDC-301  COMPUTER  CHARACTERISTICS 
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The  combination  of  instruction,  data,  and  RAM  or  volatile  memory 
per  board  is  based  on  typical  application  demands  and  can  be  altered, 
if  necessary,  for  other  specific  mixes.  Figure  7 is  a picture  of  a 
PROM  memory  board.  Both  PROM  and  EAROM  memory  boards  require  user 
instrumentation  tooling  or  "loaders"  to  modify  the  contents  of 
memory.  Honeywell  has  designed  and  uses  representative  loaders  both 
in  the  factory  and  at  field  sites.  Memory  alteration  times  for  PROM 
memory  can  be  achieved  in  a matter  of  a few  hours  including  removal 
of  the  discrete  PROM  part  from  the  memory  board.  EAROM  memory  can 
be  altered  in  a few  minutes  with  appropriate  loader  either  at  the 
board  level  or  in  the  final  device  configuration. 

All  Input/Output  (I/O)  electronics  are  contained  on  three  separate 
double-sided  printed  circuit  boards  identical  in  size  and  mounting 
characteristics  to  the  CPU  and  memory  boards.  Both  typical  and  current 
ASM  I/O  functions  are  listed  in  Table  2 and  a functional  diagram  of 
the  vehicle  or  weapon  interface  is  shown  in  Figure  8 . 

TABLE  2.  I/O  FUNCTIONS 


Function 

ASM  I/O 

Typical  I/O 

INPUT: 

Serial  Word 

Load  computer 

Load  computer 

Pulse  Counters 

Receive  4 channels  of 
inertial  data 

Receive  6 channels  of 
inertial  data;  expand- 
able for  other  data 

Analog  Input 

Homing  head  and  radar 
altimeter  inputs 

10  channels  available 

-Input  Discrete 

Missile  staging/ re  lease 
and  arm/destruct 

12  inputs  available 

Power  Monitor 

Orderly  power  Up/Down 

Orderly  power  Up/Down 

OUTPUT: 

Serial  Word 

(Not  included) 

Tel emetry 

Analog  Output 

10  channels;  autopilot, 
homing  head,  test 

16  channels  available 

Output  Discrete 

6;  autopilot,  homing  head, 
aircraft 

Any  number  easily 
mechani zed 

Time  Interrupt 
F requency 

200  Hz 

200  Hz 

'3 
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Although  most  specific  applications  require  tailored  I/O,  much  of  the 
existing  I/O  can  be  employed  with  minimum  nonrecurring  effort.  I/O 
functions  are  presently  divided  among  the  three  boards  as  follows: 

Board  I/O  Functions 


1.  Multiplexer  Board 


2.  A->-D,  D->-A  Board 


3.  Control  Logic 


• Line  receivers  for  AV  and  A0  pulses 
and  decode  signal 

• Eight-bit  bidirectional  counting  cap- 
ability for  each  of  6 sensor  channels 

• A 16  bit  word,  4:1  digital  multi- 
plexer function  with  three  words  dedi- 
cated to  counter  sampling  and  one 
word  available  as  a spare.  (Addi- 
tional input  bus  expansion  is  easily 
accomplished  through  use  of  the  wire- 
OR'd  input  bus  configuration  and/or 
addition  of  another  set  of 
multiplexers . ) 

• Countdown  logic  to  generate  a 200  pps 
interrupt  to  CPU 

• Address  decoding  for  the  counter 
sampling 

• Test  function  for  each  channel 
pulse  counter 

(A-+D  Functions) 

• Angular  rate 

• Acceleration 

• Angles  (aircraft  gimbal,  other) 

• Target  information 

• Altitude  information 

• Generation  of  error  signals  for: 

Steering 

Fire  control  (antenna  pointing, 
optical  scanning,  etc.) 

Missile  stabilization 

• Display  generation 

• Telemetry/Test  Instrumentation 

• Address  decoding  for  all  I/O  functions 

• Discrete  output  generation  for: 

Arming  a weapon,  ignition,  and 
separation  control,  target  acquisi- 
tion indication,  mode  control  for 
supporting  functions 
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3.  Control  Logic 
(Continued) 


• Discrete  output  generation  (Continued) 

Self-test  (GO)  indication 
Internal  I/O  control  functions 

• Control  line  buffering,  fan-out,  and 
fan-in  logic 

• Power  interrupt  circuitry  to  generate 
an  orderly  power-up/ power-down . 


Filtered  dc  power,  at  the  required  voltages  for  the  computer  and  ISA, 
is  provided  by  a unique  high  frequency  DC/DC  converter.  This  converter 
accepts  aircraft  or  missile  battery  28  volt  dc  power  through  a diode 
"OR"  connection  and  time-ratio  regulates  the  voltage  for  use  by  a 
high  frequency  power  generator.  This  power  generator  produces  a 
square-wave  voltage  which  is  converted  to  the  required  levels  by  a 
small  toroidal  transformer  having  multiple  secondary  windings.  Con- 
ventional rectifier/filters  render  the  transformed  ac  power  in  useful 
dc  form. 


Excellent  thermal  and  EMI  control  has  been  achieved  by  locating  the 
power  supply  in  the  base  of  the  computer  and  maintaining  a bulkhead 
between  the  power  supply  and  the  other  circuits  of  the  computer. 

In  summary,  the  HDC-301  offers  a compact  configuration  with  low  weight, 
size,  and  power.  In  addition,  it  features  versatile  and  easily 
applied  memory  options  and  common  I/O  functions  which  are  easily  adapted 
to  specific  tactical  weapon  requirements. 
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4.0  SOFTWARE 


Software  is  the  generic  name  used  to  describe  the  prog  ams , routines, 
codes,  and  other  written  information  used  with  digital  computers  as 
distinguished  from  the  actual  devices  or  "hardware".  Honeywell  has 
a complete  set  of  software  (S/W)  tools  for  program  development  or 
adaptation  including  an  HDC-301  users  manual,  an  assembler,  simulators, 
utility  subroutines,  and  I/O  test  programs.  In  addition,  S/W  to  test 
the  CPU,  memory  boards,  I/O,  flight  software,  and  to  calibrate  and 
test  the  ISA  has  been  developed.  Only  the  application  dependent  I/O 
S/W  requires  modification  for  new  applications . 

A complete  library  of  operational  software  modules  is  available  for 
specific  missions.  The  following  list  comprises  the  most  commonly 
used  software  modules  for  tactical  Guidance  and  Control: 

Input  Related  Software 

Initialization 

Target  Data  Input 

Sensor  Compensation  Input 

Attitude  Input 

Position  and  Velocity  Input 

Initial  Mode  and  Timing  Input 

Parity  Processing  Input 

Conversion  to  Internal  Program  Parameters 
Alignment 

Transfer  (Velocity  Match  Alignment  to  aircraft  navigator) 
Ground  Gyrocompass 
Fixed  Position  Update 

Flight/Operational  Processing 

Sensor  Input  Processing  (inertial  or  special) 

Strapdown  Coordinate  Transformation 
Navigation 

Guidance  and  Steering 

Flight  Control  (application  dependent) 

Attitude  Maintenance 
TM  Signal  Processing 
Self-Test  Timing  Generation 

Output  Related  Software 

Special  Devices  (Homing  head  scanning,  discrete  outputs, 
staging,  etc.) 

TM  Outputs 
Steering  Outputs 
Self-Test  Output 
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The  listed  software  modules  for  the  H-478F/HDC-301  have  been  augmented 
with  5-state,  8-state,  and  12-state  Kalman  filters  for  specific  appli- 
cations. Velocity  matching  alignment  to  master  navigator  is  a key 
software  function  that  permits  fast  reaction  time  essential  to  many 
tactical  weapons  deployment. 
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5.0  ENVIRONMENTAL 

The  H-478/HDC-301  Inertial  system  was  basically  designed  to  meet 
MIL-E-5400  Class  1A  equipment.  Development  evolution  and  customer 
requirements  have  expanded  the  environmental  capacity  of  the  system 
Table  3 summarizes  the  environmental  characteristics  of  the  system. 

TABLE  3.  ENVIRONMENTAL  CHARACTERISTICS 


Envi ronment 
Envi ronment 

Vibration 


Temperature 


A 1 1 i tude 


Shock 


H-478F 

10  grms  20-2000  Hz 
random 


-40  to  +145°F 
(Operation  to  +160°F 
possible  with  perform- 
ance relaxation) 

70,000  feet 

20g , 11  ms  , half  sine 
(operating) 

Per  MIL-STD-461A 
Notice  3 for  Class  ID 
Equi pment 


H DC  - 30 1 ( BG8105 
Configuration) 

7.6  grms  20-2000  Hz  random 

lOg-pk  20-2000  Hz 
sinusoidal 

-31  to  +160°F 


70,000  feet 

20g,  11  ms,  half  sine 
(operating) 

Per  MIL-STD-461A  Notice  3 
for  Class  ID  Equipment 


95  percent  mi n i mum 


95  percent  minimum 


6.0  RELIABILITY 


Established  reliability  parts  are  used  in  both  the  ISA  and  computer 
unit,  e.g.,  microcircuits  per  MIL-STD  883  Class  B or  better,  semi- 
conductors per  JANTX  or  better,  resistors  per  MIL-STD  199  minimum 
established  failure  rate  or  better  and  capacitors  per  MIL-STD  198 
"P"  failure  rate  or  better.  Reliability  assessment  for  fixed  ground 
environment  per  MIL-HDBK-217B  is  shown  in  Table  4. 


TABLE  4.  RELIABILITY  ASSESSMENT 


Assembly 

Subassembly 

Failure  Rate 
( F / 1 0 6 Hours) 

MTBF 
(Hour ) 

H-478F  ISA 

GG1111  Gyro  (X3) 

172.8 

Q Flex  Accel  ( X 3 ) 

75.0 

Power  Supply 

3.6 

Remaining  Electronic 

31.7 

283.1 

3532 

BG8105 

Power  Supply 

3.6 

Computer 

1/0  Boards 

64.5 

CPU  (HDC-301) 

31.6 

Memory 

42.7 

Chassis 

78.2 

— ■ ...  ...  ---  1 1 - _ i .......  . . — ■ — ■ 

220.6 

4132 

Actual  experience  with  flight  hardware  has  shown  that  eleven  H-478 
devices  experienced  3500  field  hours  on  the  SHAG  program  without  a 
chargeable  failure.  To  demonstrate  the  reliability  of  the  HDC-301, 
five  processors  were  subjected  to  1,000  hours  of  operation  at  125°C. 
Although  calculated  failure  rate  data  indicated  four  LSIC  failures 
should  have  occurred,  none  were  experienced. 
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7.0  SUPPORT  EQUIPMENT 

To  enhance  user  checkout  and  application  of  the  H-478/HL ’-301  Inertial 
System,  Honeywell  has  developed  the  support  equipment  shc.s'n  in  Table  5 


TABLE  5.  SUPPORT  EQUIPMENT* 


*It  is  assumed  that  the  customer  would  supplement  this  special 
purpose  test  equipment  with  appropriate  peripherals  and  standard 
lab  equipment  to  satisfy  specific  applications. 


8.0  SUMMARY 


Physical  features  and  performance  characteristics  of  the  H-478/HDC-301 
Inertial  System  make  it  a suitable  candidate  for  the  guidance  and 
control  functions  in  tactical  weapons.  Current  development  status 
assures  that  these  applications  are  low  risk.  Availability  of  existing 
software  modules  and  supporting  support  equipment  eliminates  substan- 
tial nonrecurring  effort  in  support  of  specific  applications. 

Figure  9 is  a table  identifying  the  error  sources  and  sensitivities 
for  tactical  missile  analysis  assuming  an  all  inertial  control  system, 
i.e.,  no  terminal  seeker.  Using  Figure  9 and  the  sensor  error  terms 
listed  in  Section,  Figure  3,  the  following  air-launched,  tactical- 
missile,  error  assessment  can  be  made: 

Assumptions : 

180  second  flight 

80  nautical  mile  range 

Velocity  match  alignment  providing  initial  conditions  of: 

±0.5  nm  position 
±2  fps  velocity 
±0.5  degree  azimuth 
±0.5  degree  roll 

AV  « 2000  fps 
Error  Analysis: 


Source 

Value  (3  Sigma) 

Cross  Course  Error 

Velocity 

Ft/Sec 

Position 

Ft 

Initial  Position 

3000  ft 

0 

3000 

Initial  Velocity 

2 fps 

2 

360 

Initial  Azimuth 

1.7  mr 

3.4 

610 

Initial  Roll 

1.7  mr 

9.8 

890 

Roll  Drift 

3 degree/hour 

7.6 

455 

Roll  MUSA 

6 degree/hour/g 

10.5 

904 

Accel  Bias 

1 mg 

5.8 

520 

RSS 

17.7 

3413 
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Source 


Initial 

or  Position 

Initial 

or  Velocity 

Initial 

Azimuth 

Initial 

Rol  1 

Roll  Drift 

Roll  MUSA 

Cr  Accel 

Bias 

1 Units 

Uni  ts 

Conversi on 
Factor 

Ft 

1 

Ft/Sec 

1 

MR 

0.001 

MR 

0.001 

Deg/Hr 

4.848  x 10'6 

Deg/Hr/G 

4.848  x 10'6 

Mil i - g 

0.001 

0 

1 

AV 
G T 

1/2  G T‘ 
AV  T 
G T 


1 

T 

AV  T 


Source  Value  x Unit  Conversion  Factor  x Sensitivity  = Err 
T Time  (Seconds) 

G Gravity  (32.2  Ft/Sec^) 

AV  Initial  Velocity  Change  (Ft/Sec) 

FIGURE  9.  SIMPLIFIED  MISSILE  ANALYSIS  (T  < 10  MIN) 


i 

i 
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If  errors  in  the  pure  inertial  mode  preclude  the  mission  objective, 
then  a terminal  seeker  may  have  to  be  added.  The  subsequent  error 
analysis  would  have  to  contrast  the  cr-ss  range  RSS  with  the  seeker 
acquisition  basket.  With  this  type  of  analysis,  an  interested  user 
can  examine  the  applicability  of  the  H-478/301  system  to  specific 
applications . 

Honeywell  is  confident  that  the  H-478/HDC-301  system  can  be  a satis- 
factory solution  to  a variety  of  guidance  and  control  problems 
involved  in  tactical  weapon  development,  production,  and  deployment. 
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INTRODUCTION 


The  rationale  for  choosing  a particular  packaging 
technique  for  any  system  is  always  dependent  on  the  fixed 
parameters  of  the  system.  In  cases  where  there  is  ample 
volume  and  weight,  many  schemes  can  be  considered  from  which 
the  cheapest  and  most  reliable  design  can  be  chosen.  In  cases 
where  there  are  severe  limitations  on  volume,  weight,  and  inter- 
connect capacity  yet  a high  reliability  factor  is  required,  the 
number  of  viable  alternatives  becomes  reduced  and  newer  tech- 
nologies and  techniques  must  be  employed. 

In  the  case  of  the  AIRS  (Advanced  Inertial  Reference 
Sphere)  inertial  guidance  system  there  were  limitations  that 
made  conventional  packaging  virtually  impossible.  The  simple 
communication  system  of  essentially  a single  physical  line 
obviated  the  need  for  packaging  the  electronics  within  the 
IMU  (Figure  1).  At  the  same  time,  neutral  buoyancy  and  a 
precise  center  of  gravity  of  the  IMU  was  essential  thus 
limiting  the  flexibility  on  materials  selection  and  structural 
geometries.  Since  the  system  was  initially  developed  for 
missile  applications,  it  was  desirable  to  minimize  the  overall 
volume  and  the  basic  sphere  size  was,  therefore,  defined  as 
that  which  would  mechanically  house  the  six  instruments.  The 
available  volume  then  for  electronics  resulted  in  nine  major 
irregular  volume  envelopes  as  depicted  in  Figure  2. 


AIRS  ELECTRONIC  HARDWARE 


The  major  concern  as  with  most  high-density  electronic 
systems  was  the  overall  interwiring  scheme  between  modules  and 
major  assemblies  within  the  system.  The  design  philosophy  chosen 
was  to  keep  the  wiring  external  to  the  modules  as  simple  as 
possible  by  preassigning  signal  locations  at  the  module  level 
and  using  a simple  lateral  interwiring  system  through  the  use 
of  multiple  but  identical  flextapes  and  a vertical  communica- 
tions link  by  a single  layer  wiring  array  (Figure  7).  The 
system  level  interwiring  could  be  accomplished  through  the 
use  of  annular  multilayer  boards  installed  in  each  major  cavity 
with  top  surface  pads  as  the  interface  areas  for  mating  with 
the  connectors  on  the  major  electronic  assemblies. 

The  simplification  of  the  system  interwiring  system 
by  preassigning  signals  at  the  terminals  of  all  hybrid  modules 
necessitated  the  ability  to  have  infinite  unscrambling  power  at 
the  module  level.  This  was  achieved  by  using  a five  layer  thick 
film  mother  board  interwiring  system  for  each  module  (Figure  8) . 

The  multilayer  substrates  were  fabricated  from  raw 
stock  of  0.030"  94%  fired  alumina  on  which  conductors,  inter- 
connect vias,  and  dielectric  layers  were  deposited  by  concen- 
trated thick  film  multiple  screening  and  firing  processing. 


A typical  sequence  is  shown  in  Figure  9 . These  boards  are 
the  nucleus  for  the  AIRS  hybrid  modular  system. 


The  general  hybrid  module  concept  for  the  AIRS  system 
can  essentially  be  described  as  groups  of  separate  hybrid  sub- 
units mounted  and  integrated  on  thick  film  MLB ' s . A typical 
module  is  shown  in  Figure  10.  The  engineering  rationale  for 
the  particular  technique  is  that  each  subunit  can  be  individ- 
ually inspected,  tested,  burned-in,  etc.,  before  integration 
at  a higher  and  more  costly  level  of  assembly,  the  object  being 
to  identify  all  marginal  and  bad  devices  at  the  subunit  level 
where  the  impact  of  repair  and/or  scrap  is  minimal.  Figure  11 
illustrates  a typical  subunit  mounted  for  test.  A typical 
assembly  processing  sequence  is  shown  in  Figure  12.  Any 
causes  for  rejecting  completed  modules  then  are  solely  due  to 
handling  and  process  damage  during  the  assembly  phase  of  inte- 
grating the  subunits  through  the  module  level.  The  yield  on 
subunits  was  characteristically  92%  alowing  some  rework  with 
about  30%  of  the  subunits  started  being  recycled  for  rework. 

It  is  important  to  note,  however,  that  the  acceptance  criteria 
for  AIRS  hybrid  units  is  extensive  and  rigid  including  tight 
process  controls  and  visual  requirements  as  well  as  performance 
specifications.  Many  of  the  reworked  units  were  recycled  for 
refinements  such  as  a second  cleaning,  scratched  pad,  insuffi- 
cient bonding  fillet,  etc.,  and  were  not  catastrophic  rejections, 
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The  yield  on  integrating  subunits  to  MLB ’ s to  complete  modules 
was  approximately  96%,  the  causes  for  rejection  being  primarily 
mechanical  and/or  visual  defects. 

A most  critical  element  of  the  hardware  phase  of  the 
AIRS  Program  was  the  specification,  purchasing,  and  acceptance 
of  electrical  components.  Components  were  purchased  from  various 
vendors  to  formal  Source  Control  Documents  (SCD's)  which  were  a 
combination  of  the  vendor's  specifications,  any  special  require- 
ments and  military  standards  such  as  visual  inspection  criteria 
as  in  MIL-STD-883.  Lots  were  accepted  on  a twenty-five  piece 
sampling  plan  whereby  a single  failure  of  any  electrical  param- 
eter was  cause  for  rejection  of  the  lot.  All  chips  were  100% 
visually  inspected  for  MIL-STD  883  B criteria  before  release  to 
the  fabrication  area  (Figure  13) . 

It  is  important  to  emphasize  that  historical  experience 
in  fabricating  hybrid  systems  of  all  types  and  complexities  has 
indicated  that  it  is  absolutely  essential  to  develop  and  confirm 
formal  process  specifications  and  procedures  and  to  maintain 
discipline  in  adhering  to  them  throughout  all  phases  of  fabri- 
cation . 

The  potential  problem  of  conductive  particle  contami- 
nation such  as  mobile  solder  balls  and  stray  wire  bond  tails 
was  recognized,  addressed,  and  countermeasured  through  the  use 


£Wr  * l* 


/ 


of  an  aromatic  organic  conformal  coating,  monochloropolypara- 
xylylene,  for  which  the  trade  name  is  "Parylene  C".  The 
compound  is  basically  a linear  polymer  of  chlorinat  d xylene 
molecules  deposited  from  a dimer  which  is  sublimed,  energized 
in  a reactor,  and  deposited  as  a continuous  film  at  room 
temperature.  The  process  is  licensed  by  Union  Carbide  and 
is  functionally  described  by  Figure  14.  The  coating  has 
infinite  and  uniform  deposition  coverage  and  was  found  to  entrap 
and  immobilize  particles.  A thorough  and  adequate  thickness 
coverage  was  found  to  be  0.0006".  The  polymerized  compound 
is  basically  inert  to  all  solvents  but  wilx  oxidize  at  tem- 
peratures at  or  about  100°C  and  begin  to  lose  strength,  craze, 
and  peel.  In  a nitrogen  ambient,  however,  the  stability  is 
much  higher. 


Examples  of  AIRS  modules  are  depicted  in  Figures  15a  &b. 
Again,  the  reason  for  the  unconventional  configurations  is  due 
to  circuit  density.  Wherever  possible,  rectangular  geometries 
were  used.  In  simpler  systems  where  standard  packages  are 
feasible,  it  is  recognized  that  standardization  and  commonality 
are  prime  goals,  and  a concentrated  effort  towards  simplicity 
and  redundancy  should  be  made. 


A summary  of  the  electronic  elements  comprising  the 
AIRS  system  is  shown  in  Figure  16.  A good  deal  of  redundancy 


It  is,  therefore,  concluded  that  hybrid  microelec- 
tronics can  truly  make  a major  contribution  to  advanced  elec- 
tronic systems  where  a premium  on  weight  and  volume  exists. 

Yield,  performance,  maintainability,  and  reliability  have 
been  verified  to  the  extent  that  hybrid  circuits  for  military 
systems  are  indeed  a reality. 

HYBRIDS  IN  FUTURE  SYSTEMS 

There  are  many  electronic  systems  that  do  not  have 
the  conical  and  spherical  geometries  as  dictated  by  the  AIRS 
system.  Many  systems,  for  example,  are  employing  the  Naval 
Avionics  Facility, Indianapolis, (NAFI)  packaging  concept  whereby 
structures,  frames,  and  connectors  are  standard  and  proven 
pieces  of  hardware  available  in  various  dimensional  integrals 
to  which  discrete  electronic  components  are  mounted  (Figure  17). 
Such  a condition  represents  an  ideal  case  for  applying  advanced 
technology  to  an  existing  and  proven  concept  in  the  interest  of 
achieving  reliability,  commonality,  and  cost  effectiveness. 

Figure  18  represents  an  example  of  what  a NAFI  card  might  look 
like  if  hybrid  microelectronics  were  adopted  and  integrated  into 
a NAFI  System.  It  is  estimated  that  eight  to  twelve  conventional 
discrete  component  cards  could  be  replaced  with  a single  hybrid 
card . 
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SIMULTANEOUS  CONSIDERATIONS  WHEN  DESIGNING  A SYSTEM 
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Figure  3 

■■CONCLUSIONS  FROM  CONCFPT  STtJDTF.S 


Volume,  weight,  and  interconnect  limitations 

MANDATED  THE  USE  OF  HYBRID  TECHNOLOGY, 


Standard  and  regular  geometries  could  not  be 

USED  DUE  TO  THE  HIGH  COMPONENT  DENSITY. 


The  interfacing  of  all  electronic  assemblies 

COULD  BE  ACCOMPLISHED  WITH  CONNECTORS. 
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Typical  Examples  of  AIRS  Hybrid  Modules 
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SUMMARY  - AIRS  ELECTRONIC  ELEMEKTS 


UiiIQU£ 

MODULES  81 

CERAMIC  MLB'S  62 

THIN  FILM  MB  13 

SUBUNITS  286 

SUBUNIT  ARTWORK  264 

MODULE  COVERS  33 

SYSTEM  MLB'S  (EPOXY)  9 

SYSTEM  SINGLE  LAYER  5 

BOARDS 

SYSTEM  FLEXTAPES  45 

STRUCTURES  18 

DEVICES  (WITHOUT  INSTRUMENTS) 

IC'S  847 

TRANSISTORS) 

DIODES  f 1899 

RESISTORS  3152 

CAPACITORS  1633 

TRANSFORMERS  125 

TOTAL  7656 


Figure  16 
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SESSION  II 


TEST  AND  SUPPORT 
SESSION  CHAIRMAN 


LEONARD  R.  SUGERMAN,  COLONEL,  USAF  ( ET) 

Now  retired  from  the  Air  Force  but  still  active  in  the  inertial  business, 
Len  Sugerman  was  Chief  of  the  Plans  and  Requirements  Office,  Air  Force 
Special  Weapons  Center,  Kirtland  AFB,  New  Mexico.  A past  President  of 
the  Institute  of  Navigation  he  holds  the  Norman  P.  Hays  Award  and  the 
Air  Force  Association  Meritorious  Award  for  management  as  well  as  his 
military  decorations.  He  received  his  BS  in  Engineering  from  MIT  and  a 
Master's  in  Business  Administration  from  the  University  of  Chicago.  He 
is  the  US  Coordinator  for  the  AGARD  G&C  Panel  and  is  currentlv  Consultant 
to  the  Physical  Sciences  Lab  of  the  New  Mexico  State  University. 
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BRIEFING  TITLE 


APPLICATION  OF  A MAINTENANCE  WARRANTY  APPROACH 
IN  THE  SWEDISH  AIR  MATERIAL  DEPARTMENT 


JAN  BROGREN 

Mr.  Brogren  is  employed  by  the  Defense 
Material  Administration,  Air  Material 
Department,  Airborne  Electronics 
Division,  Stockholm,  Sweden.  He  is 
head  of  the  Flight  Data  Systems  Group 
responsible  for  planning  of  avionic 
development  and  production  phases  for 
the  Swedish  Air  Force.  His  Group 
prepares  and  analyzes  system 
specifications,  evaluates  proposals 
and  conducts  negotiations  with  Swedish 
and  foreign  vendors.  They  are 
responsible  for  planning  and  layout  of 
all  levels  of  maintenance  for  air  data 
computers  and  Inertial  Navigation 
Systems  and  components.  Mr.  Brogren 
was  his  Country's  Representative  at 
Kearfott  in  the  development  of  the  INS 
for  the  JA  37  Viggen  aircraft. 


THEODORE  "TED"  CROSIER 

Mr.  Crosier  received  his  Be.nelor  of 
Science  Degree  in  Mechanical  Engineering 
from  the  University  of  Akron  and  his 
Master  of  Arts  Degree  in  Management  and 
Supervision  from  Central  Michigan 
University.  He  has  been  employed  at  AGMC 
since  1965.  Prior  to  his  current  position 
as  Chief  of  the  Industrial  Engineering 
Support  Division,  Plans  and  Programs 
Office,  he  was  Manager  of  the  Value 
Engineering  Program. 
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Jan  Brogren 
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Theodore  E.  Crosier 
Newark  Air  Force  Station 
Newark,  Ohio 


Russell  M.  Genet 
PRAM  Office,  WPAFB 
Dayton.  Ohio 


Earl  T.  Bodem 

Newark  Air  Force  Station 

Newark,  Ohio 


NINTH  DATA  EXCHANGE  FOR  INERTIAL  SYSTEMS 
Clearwater,  Florida 
Nov  18-19  1975 

AND 


1976  ANNUAL  RELIABILITY  AND  MAINTAINABILITY  SYMPOSIUM 
Las  Vegas,  Nevada 
Jan  22,  1976 
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PART  I 

APPLICATION  OF  A RELIABILITY  AND  MAINTAINABILITY  WARRANTY  IN  THE 

SWEDISH  AIR  MATERIAL  DEPARTMENT 

With  the  procurement  of  the  navigation  system  for  the  fighter  version 
of  the  Viggen  aircraft  the  Swedish  Air  Material  Department  entered 
for  the  first  time  the  intricat  world  of  Inertial  Navigation.  When 
consulting  other  countries  Air  Forces  with  inertial  systems  in  their 
inventory,  we  learned  that  inertial  systems  are  much  more  powerful 
than  conventional  attitude  platforms,  but  extremely  expensive  to 
ma inta in . 

Consequently  a condition  for  us  to  get  an  approval  by  the  government 
to  go  inertial  was  to  be  able  to  accurately  estimate  and  control 
the  maintenance  costs. 

Thus  during  the  purchasing  phase  of  the  Inertial  Navigation  System, 
a special  attention  was  paid  to  the  reliability,  maintainability  and 
the  life  cycle  cost  of  the  equipments. 


The  cost  of  ownership  became  as  an  important  evaluating  factor  as 
the  performance  and  the  initial  cost  of  the  equipment.  We  had  to 
estimate  the  real  field  reliability  with  a high  degree  of  confidence, 
and  the  time  and  cost  for  every  main  maintenance  action. 
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To  reach  the  highest  possible  confidence  of  the  cost  of  ownership,  we 
worked  close  with  the  maintenance  analysis  specialists  at  our  Gyro 
System  Central  Depot  which  is  called  CVM.  They  participated  and  were 
also  responsible  for  the  parts  of  the  contract  which  cover  test  and 
maintenance.  At  the  same  time  the  same  specialists  started  their 
early  planning  work  at  the  depot  for  the  new  equipment  in  the  inventory, 


To  achieve  a confidence  high  enough  to  compare  the  cost  of  ownership 
with  the  initial  cost  took  us  roughly  one  year  of  concentrated  studies. 
The  approach  was  a three*1' stage  analysis.  At  first  we  received  from 
the  different  vendors  all  theoretical  information  regarding  reliability 
and  maintainability,  but,  as  you  know,  those  figures  do  not  necessarily 
reflect  the  real  life. 


The  second  stage  was  to  follow  the  test  and  repair  actions  performed 
at  the  vendors  facilities  in  order  to  increase  our  knowledge  about  the 
maintainability  of  their  equipment.  Together  with  the  respective  vendor 
we  selected  some  typical  repair  actions  and  followed  and  timed  every 
single  step  of  the  repair  from  the  incoming  inspection  to  final  delivery. 
We  found  that  the  time  consumed  and  actions  performed  extensively  ex- 
ceeded the  theoretical  values  submitted  with  the  initial  proposal. 


I would  like  to  comment,  that  inducing  the  vendors  to  perform  this 

analysis  was  time-consuming,  and  difficult  to  negotiate.  One  vendor 

did  not  let  us  in  his  workshop  and  was  consequently  severly  handicapped 
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in  the  competition . 
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The  third  stage  was  to  analyze  the  data  collected  from  the  second  stage 
and  transfer  it  over  to  the  overall  maintenance  approach  of  our  depot. 

To  make  that  possible  we  together  with  the  vendor  laid  out  preliminary 
maintenance  flow  diagrams  showing  not  only  time  consumption  for  each 
operation  but  also  preliminary  specifications  for  test  equipment  and 
tools  needed  for  the  maintenance. 

Finally  we  received  sufficiently  confident  figures  of  our  depot  main  - 
tenance  cost  over  the  life  cycle  of  equipment.  Now  the  big  remaining 
question  was  how  to  put  this  into  a covering  guarantee  clause  in  the 
contract . 

The  conventional  Laboratory  Reliability  Demonstration  and  the  Laboratory 
Mean  Time  to  Repair  Demonstration  were  not  sufficient  because  we  wanted 
the  data  to  be  representative  of  the  actual  operating  environment, 
not  the  laboratory  environment. 

Some  of  the  ideas  that  we  finally  worked  out  are  close  to  what  can 
be  found  in  the  avionics  contracts  for  the  commercial  airlines. 

The  main  and  most  important  idea  was  holding  the  manufacturer  responsible 
for  the  maintenance  effort  when  performed  at  our  repair  facilities. 

For  that  purpose  he  had  to  have  detailed  knowledge  about  the  Swedish 

Air  Force  maintenance  philosophies  at  all  levels,  how  the  central  depot 
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s orking,  its  organization,  spare  parts  supply  systems,  etc. 


We,  therefore,  made  it  possible  for  the  different  vendors  maintenance 


specialists  to  visit  and  study  our  facilities  in  Sweden. 

After  the  vendors  had  thorough  knowledge  of  the  depot  and  maintenance 
organization,  they  had  to  propose  a Preliminary  Maintenance  Plan  which 
was  subject  to  several  discussions  between  us  regarding  its  content. 

The  plan  was  also  agreed  upon  by  the  depot  to  be  followed  as  a guide- 
line for  the  maintenance  layout. 

The  maintenance  effort  could  not  be  expressed  in  Swedish  crowns  or 
US  dollars  due  to  different  and  unpredictable  changes  in  currency  and 
inflation  for  which  the  vendors  could  not  be  held  responsible.  The 
solution  was  to  express  the  effort  in  time,  in  Maintenance  Manhours, 
which  divided  by  the  Operating  hours  off  the  platforms  (MMH/OH) , became 
a measurement  of  our  effort  required  to  maintain  the  equipment. 

The  plan  could  now  be  used  by  the  vendors  as  the  ground  material  to 
calculate  the  MMH/OH. 


At  this  point  the  vendors  submitted  quotes  for  the  Inertial  equipments, 
test  equipments,  tools,  maintenance  manuals,  training  courses,  plus  a 
guaranteed  figure  of  the  maximum  maintenance  manhours  per  operating  hour 


Now  I would  like  to  give  some  information  about  the  headlines  of  the 


guarantee  clause. 
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The  quantitative  measurement  of  the  guaranteed  maintenance  manhour  per 
operating  hour  shall  not  begin  until  the  26th  depot  level  repair  action 
has  taken  place,  avoiding  the  impact  of  the  depot  learning  curve  on 
the  measurement. 

The  measurement  of  the  guaranteed  MMH/OH  shall  be  in  accordance  with 
the  Final  Maintenance  Plan  to  be  agreed  to  by  the  parties.  The  plan 
will  include  definitions  of  Test  Equipment,  training,  failure  and 
repair  specifications  and  procedures,  repair  manuals  and  record  keeping. 

Data  from  actual  depot  level  maintenance  activities  shall  serve  as  the 
basis  for  maintenance  performance  evaluation  and  shall  as  a minimum 
include  time  card  records  from  all  depot  level  maintenance  actions, 
elapsed  time  indicator  readings,  spare  parts  requisition  cards,  test 
data,  failure  analysis  and  serial  numbers  of  the  equipments  and  major 
components  being  tested  and  maintained.  This  data  shall  be  collected 
by  and  provided  to  the  manufacturer  by  the  depoc. 

Depot  level  repairs  shall  include  failure  localization,  removal/ 
replacement  of  the  defective  component  and  verification  of  the  repaired 
subunits  and  spare  parts  including  acceptance  testing  and  calibration 
where  applicable  in  accordance  with  the  mutually  approved  Final  Main- 
tenance Plan. 
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So  called  Maintenance  Evaluation  Meetings  shall  be  instituted  to  be  held 
every  nine  months,  chaired  by  the  Air  Material  Department  with  the 
manufacturer  and  depot  personnel  in  attendance.  The  initial  meeting 
will  be  held  at  the  start  of  the  measurement  period  with  subsequent 
meetings  to  be  held  at  nine  month  intervals  thereafter.  The  prime 
purpose  will  be  to  evaluate  the  prior  nine  months  maintenance  data 
compiled  by  the  depot,  discuss  the  major  problem  areas  and  initiate 
corrective  action  recommendations  as  deemed  necessary. 

Initial  accept-re ject  criteria  for  maintenance  manhour  per  operating 
hour  will  be  measured  at  the  fourth  meeting  wherein  the  results  over 
the  past  27  months  period  will  be  established. 

If  this  analysis  reflects  guarantee  achievement,  the  manufacturer  has 
fulfilled  his  contractual  obligation. 

In  the  event  that  this  maintenance  guarantee  is  not  met,  the  manufacturer 
will  be  granted  a nine  months  period  to  accomplish  remedial  actions. 
Remedial  actions  may  include  changes  to  the  inertial  equipment,  test 
equipment,  test  procedures  and  maintenance  practices. 

Following  the  manufacturers  demonstrated  or  initiated  corrective  action 

period,  additional  nine  months  audit  periods  shall  be  conducted  for 

re-evaluation  of  the  MMH/OH  measurement  critera.  After  demonstration 

of  two  consecutive  nine  months  audit  periods  wherein  the  average  MMH/OH 
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is  equal  to  or  less  than  the  agreed  upon  level,  the  manufacturer  shall 
be  considered  to  have  successfully  completed  this  contract  requirement. 

In  the  event  that  this  maintenance  guarantee  still  is  not  met,  the 
manufacturer,  in  addition  to  continuing  to  implement  improvements,  will 
undertake  one  of  the  following  measures  as  directed  by  the  customer: 

a)  Provide  all  Depot  level  Maintenance  at  his  own  expense. 

b)  Provide  direct  labor  or  equivalent  cost  reimbursement  to  the 
customer  in  the  amounts  required,  to  maintain  the  cumulative  net 
actual  labor  effort  consistent  with  the  guaranteed  MMH/OH,  at  no 
cost  to  the  customer. 

After  long  negotitations  with  the  competing  vendors  Singer  Kearfott 
was  finally  awarded  the  contract. 

Kearfott  has  developed  and  delivered  six  prototype  Inertial  equipments 
to  us.  An  option  for  switching  over  to  the  new  Singer  Kearfott  2600 
platform  was  exercised  early  1974,  and  three  of  those  platforms  have 
since  then  been  delivered  for  use  in  our  test  aircrafts. 

The  decision  of  switching  to  the  new  platform  was  very  much  grounded 
on  assumed  improvements  in  better  reliability  and  maintainability. 
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At  the  present  time,  however,  in  comparing,  the  reliability  of  the  two 
generations  of  platforms,  the  new  2600  platform  can  not  compete  with 


the  old  KT70.  The  reason  for  this,  I feel,  falls  with  problems  in 
program  management,  workmanship  and  quality  control.  I do  not  think 
it  is  inherent  in  the  design  itself. 

To  refine  the  preliminary  maintenance  plan  and  in  detail  define  the 
logistic  elements  especially  test  equipment  and  spare  parts  furnishing 
our  depot  signed  a one  year  Integrated  Logistic  Support  contract 
with  Kearfott. 

During  this  year  the  depot  and  Kearfott  people  have  been  working  to- 
gether in  Sweden  and  the  United  States. 


r 
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The  final  report  which  is  now  delivered  from  Kearfott  will  form  the 
base  for  the  mutually  binding  Final  Maintenance  Plan. 

As  I previously  said  the  idea  of  this  warranty  application  is  to  hold 
the  manufacture  responsible  not  only  for  the  reliability  and  maintain- 
ability of  the  equipment  but  also  for  the  maximum  maintenance  effort 
when  performed  at  the  customers  depot.  I intend  to  within  a few  years 
report  how  successful  we  have  been  with  this  approach. 


* 
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PART  II 


SIMLARITIES  BETWEEN  THE  SWEDISH  RELIABILITY  AND  MAINTAINABILITY 
WARRANTY  AND  THE  UNITED  STATES  AIR  FORCE  RELIABILITY  IMPROVEMENT 
WARRANTY 


We  at  AGMC  have  been  following  Sweden's  approach  to  warranty  contracts 
for  the  past  two  years  and  will  continue  to  do  so  in  the  future.  We 
believe  that  you  should  be  made  aware  of  and  take  advantage  of  their 
experience.  I would  like  to  point  out  the  similarities  between  the 
Swedish  warranty  and  the  Reliability  Improvement  Warranty  (RIW)  and 
raise  this  question. 

Both  the  Swedish  and  US  warranties  have  the  same  purpose,  i.  e.,  to 
accurately  estimate  and  control  life  cycle  costs  (LCC)  of  INS. 

Our  objectives  are  identical.  We  are  both  seeking  a contract  that 
provides  an  incentive  to  the  contractor  for  making  reliability  and 
maintainability  improvements  which  reduce  support  costs.  I can  not 
stress  enough  that  there  are  two  equally  important  ways  to  reduce  LCC; 
(1)  keep  it  in  the  field  longer,  and  (2)  lower  the  repair  cost. 

The  actual  warranty  contracts  being  used  in  Sweden  and  the  US  fix  both 
contractor  price  and  system  performance  while  providing  incentives  for 
improved  reliability  and  maintainability.  Again,  the  desired  end  is 
reduced  LCC,  the  emphasis  being  shifted  from  acquisition  cost  to  total 
cost. 
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Both  warranty  approaches  reduce  government  risk  from  the  viewpoint 
that  the  contractor  becomes  responsible  for  reliability  and  main- 
tainability improvements. 

Both  approaches  overcome  a real  weakness  in  former  INS  reliability 
and  maintainability  testing  and  qualification.  The  benign  environment 
of  the  laboratory  and  government  test  facilities  is  replaced  with  the 
actual  operating  and  maintenance  environment. 

Greater  emphasis  is  placed  on  LCC  because  those  parameters  that  are 
the  most  sensitive  in  the  LCC  equation  are  given  increased  management 
attention.  A real  effort  is  made  not  only  to  control  but  to  reduce  cost. 

Probably  the  most  important  benefit  to  the  contractor  is  that  he  can 
compete  in  one  contract  for  both  production  and  support  of  INS.  This 
increased  responsibility  naturally  means  larger  potential  contract 
dollars.  His  potential  for  profit  is  also  increased  with  a fixed  price 
contract.  Readily  attaining  the  contract  reliability  and  maintainability 
requirements  decreases  his  cost  and  benefits  him  financially. 

The  contractor  gains  something  he  never  really  had  before.  He  has  the 
influence  to  make  recommendations  for  changes  outside  of  the  normal 
government  approval  cycles.  He  also  has  additional  resources  availa*’-' 
for  investigating  and  making  changes,  increasing  his  flexibi  ity. 


Since  the  contractor  is  now  responsible  for  reliability  and  main- 
tainability improvements,  he  now  gains  'real  world1  R&M  experience. 
He  has  complete  knowledge  about  how  his  equipment  is  performing, 
being  used  and  maintained.  Heretofore  this  experience  was  piecemeal 
and  in  many  cases  gained  in  spite  of  and  not  because  of  contractual 
requirements. 


The  discussion  to  this  point  has  covered  those  features  and  character- 
istics that  are  similar  to  the  two  approaches.  I shall  now  explore 
some  of  the  features  offered  by  the  Swedish  approach  and  some  of  the 
RIW  problems  overcome  by  this  approach. 


The  biggest  plus  found  with  the  Swedish  approach  is  that  the  government 
is  no  longer  solely  dependent  on  the  contractors  for  support.  This 
weakness  no  longer  exists  since  government  employees  and  facilities 
are  utilized  for  maintenance.  The  risks  of  contractor  strikes,  bank- 
ruptcy and  changes  in  management,  etc.  have  been  eliminated.  The 
government  has  the  absolute  control  required  for  war  time  surge  and 
still  has  the  contractor  as  a back  up  capability. 


The  Swedish  approach  does  provide  R&M  incentives  to  the  contractor  plus 
maintainability  incentives  to  the  government  depot. 
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Their  approach  requires  R&M  demonstration  in  the  operating  environ- 
ment, a must  for  INS. 
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The  Swedish  approach  has  another  unique  feature.  It  is  based  on  a 
contractor-government  partnership.  Instead  of  assuming  that  either 
party  is  all  knowing,  it  recognizes  the  contributions  of  each.  Who 
better  knows  the  hardware  than  the  contractor  that  designed  and  built 
it?  Who  better  knows  maintenance  than  the  government  depot  that  has 
specialized  in  this  art?  This  team  approach  is  essential  for  maximum 
utilization  of  both  the  contractor's  and  the  depot's  talents  and 
experience.  If  such  an  approach  were  used  in  the  United  States  - 
AGMC's  15  years  experience  in  improving  INS  maintainability  could 
be  utilized  and  shared  with  the  contractor. 

Sweden's  concept  distributes  the  risk  more  equally.  Instead  of  heaping 
it  all  on  the  contractor,  the  government  gets  into  the  act. 

The  depot  becomes  responsible  for  TAT  and  delivery  guarantees. 

The  contractor's  risk  is  reduced  with  the  mutually  developed  maintenance 
plan.  This  plan  increases  the  accuracy  of  maintainability  and 
reliability  predictions.  Maintainability  is  completely  defined  and 
those  factors  affecting  reliability  controlled. 

If  problems  do  arise,  the  contractor  is  given  time  to  evaluate  data, 
recommend,  validate  and  implement  changes. 

No  R&M  improvements  are  required  if  the  contractor /depot  are  on  the 
MMH/OH  target  from  day  one.  No  contractor  effect  would  be  required 
under  this  condition  not  even  data  collection.  This  is  done  for  him 
by  the  depot. 
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Tie  Swedish  approach  overcomes  some  of  the  RIW  problems.  It  seems 
to  offer  a more  simplified  contract  to  both  write  and  administer. 

The  measurement  of  contractor  effectiveness  in  terms  of  maintenance 
manhours  per  operating  hours  should  help  reduce  the  number  of  disputes 
related  to  unverified  failures  and  relevant  failures.  The  contractor 
and  the  government  have  really  resolved  their  differences  during  the 
development  of  the  maintenance  plan.  Again  it  reduces  the  dependence 
on  the  contractor,  thus  reducing  support  risk. 

The  real  difference  between  the  two  approaches  is  that  Sweden  advocates 
a contractor/depot  partnership  wnile  the  RIW  relies  solely  on  the 
contractor.  This  need  for  increasing  communication  and  cooperation  is 
finally  recognized  contractually. 

The  Swedish  approach  accomplishes  everything  the  RIW  does  and  more. 
Their  warranty  decreases  both  contractor  and  government  risk  and  takes 
advantage  of  government  depot  maintenance  experience.  This  approach 
should  be  considered  and  compared  to  RIW.  It  should  not  te  rejected 
out  of  hand. 
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CLOSING  REMARKS 


INTRODUCTION 


HILOSOPHY  - CSDL/ INDUSTRY 


CONTAMINATION  IS  AN  INHERENT  INGREDIENT  IN  ALTHOUGH  A DIRECT  ONE-TO-ONE  RELATIONSHIP 

EVERY  PHASE  OF  LIFE,  ANIMATE  OR  INANIMATE.  BETWEEN  LIFE  AND  PERFORMANCE  FROM  A CONTAMINA- 

CONTAMINANTS  IN  THE  HUMAN  BODY  CAN  CAUSE  TION  EFFECT  IS  DIFFICULT  TO  ESTABLISH,  SUCH  A TREND 

SICKNESS,  DISEASE,  AND  DEATH.  CONTAMINANTS  IN  APPEARS  EVIDENT  FROM  EXPERIENCE.  IN  GENERAL,  EXTENDED 
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W1\ST. 


FOREWORD 


The  6585th  Test  Group's  Central  Inertial  Guidance  Test  Facility 
(CIGTF)  was  established  to  provide  a DOD  capability  to  test  and 
evaluate  the  products  of  the  inertial  navigation  and  guidance  industry. 

The  goals  of  the  CIGTF  are  the  following: 

Unbiased  evaluation  of  components  and  systems,  to 
provide  data  from  which  the  customer  can  select  the 
optimum  equipment  for  a given  mission  application. 

Development  of  a single  centralized  test  facility,  to 
avoid  the  prohibitive  costs  of  duplicated  facilities. 

Standardization  of  tests,  to  provide  common  yardsticks 
for  comparative  evaluations. 

Competence  in  both  personnel  and  equipment,  to  insure 
meaningful  evaluation. 

Originally  established  to  provide  test  support  for  the  development 
of  early  ballistic  missile  systems,  the  CIGTF  has  expanded  its  capability 
to  cover  the  full  spectrum  of  navigation  and  guidance  equipment.  The 
development  of  advanced  precision  test  facilities  and  the  acquisition 
of  a hard  core  of  experienced  personnel  have  produced  an  unequaled 
facility  for  the  evaluation  of  missile,  spacecraft,  and  aircraft  systems 
and  components.  This  growing  competence  has  resulted  in  increased 
emphasis  on  the  role  of  the  CIGTF  as  a national  focal  point  for 
navigation  system  testing.  The  test  facility  is  available  to  the  three 
services,  NASA,  FAA,  and  private  industry  through  government  sponsorship. 

The  purDOSe  of  this  paper  is  to  briefly  describe  the  unique 
capabilities  and  techniques  available  for  aircraft  navigation  system 
testing  that  exist  within  the  6585th  Test  Group,  Holloman  AFB,  New  Mexico. 


INTRODUCTION 


The  purpose  of  this  paper  is  to  describe  the  6585th  Test  Group's 
Central  Inertial  Guidance  Test  Facility  (CIGTF)  aircraft  navigation 
system  test  capabilities,  the  types  of  test  programs  conducted,  and  a 
review  of  recent  tests  accon’ol i shed  at  the  CIGTF. 

1 . BACKGROUND 


The  United  States  Air  Force,  recognizing  the  need  to  centralize 
the  considerable  efforts  and  investments  in  manpower  and  equipment 
required  for  testing  inertial  guidance  and  navigation  systems, 
established  the  "Central  Inertial  Guidance  Test  Facility"  (CIGTF)  in 
1959.  Located  at  Holloman  Air  Force  Base  in  New  Mexico,  the  CIGTF 
is  in  close  proximity  to  the  White  Sands  Missile  Range,  and  thus  can 
make  use  of  the  facilities  of  this  well-known  "best  instrumented 
inland  test  range  in  the  free  world."  The  primary  purpose  of  the 
CIGTF  is  to  conduct  the  development  testing  of  inertial  components, 
systems,  and  complete  navigation  systems  which  are  proposed  for 
military  applications. 

Historically,  the  CIGTF  grew  and  attained  its  status  by  testing 
inertial  boost-phase  guidance  systems  for  Minuteman,  Titan,  Centaur, 
and  Saturn.  The  emphasis  has  since  shifted  to  evaluation  of  aircraft 
inertial  navigation  systems.  The  test  methods  and  techniques  for 
analytical  evaluation  of  test  results,  which  were  rigoriously  developed 
during  the  missile  and  soace  booster  era,  are  applied  to  the 
validation  of  aircraft  navigation  systems. 

The  CIGTF  began  testing  aircraft  inertial  navigation  systems  early 
in  1964.  Relying  upon  a long  history  of  extremely  accurate  results 
derived  from  sled  testing,  the  analysts  reasoned  that  comparable 
results  could  be  obtained  if  testbed  aircraft  were  continuously  tracked 
by  radar.  Because  the  FPS-16  radars  on  WSMR  can  accomplish  this  to  an 
accuracy  of  less  than  one  hundred  feet,  a new  era  in  precision  evaluation 
was  entered. 

The  first  test  of  CIGTF  capacity  and  capability  was  the  Mark  II 
Avionics  competition.  Six  navigation  systems  were  tested  in  this 
program  between  May  and  September  1965.  Final  renort  on  the  Mark  II 
tests  was  delivered  by  November  1965.  The  success  of  this  program 
led  to  a DDR&E  Directive  designating  the  CIGTF,  Holloman  AFB,  as  the 
DOD  focal  point  for  aircraft  inertial  navigation  test  evaluation. 
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The  first  Test  Program  document  was  originally  published  in 
March  1966  to  aid  in  implementation  of  Dr.  Brown's  memorandum 
concerning  test  and  evaluation  of  aircraft  inertial  navigation  systems. 
In  April  1967,  Dr.  Foster  reiterated  the  need  for  a central  test  agency, 
quoted  here  in  part: 

"...An  Aircraft  Inertial  Navigator  Test  and 
Evaluation  Program  is  established  at  the  Central 
Inertial  Guidance  Test  Facility  (CIGTF),  Holloman 
Air  Force  Base,  which  is  the  DOD  focal  point  for 
aircraft  inertial  navigator  test  and  evaluation. 

This  CIGTF  program  will  verify  the  expected 
performance  of  inertial  navigators  and  will 
provide  comparative  results  under  the  same  test 
condi ti ons . Through  this  process,  avionics 
developers  and/or  Contract  Definition  (formerly 
PDP)  contractors  will  have  a number  of  inertial 
navigators  to  choose  from  whose  performance  has 
been  verified,  thereby  minimizing  the  risks  to 
the  Government  in  their  selection " 

The  standardized  tests  to  be  described  in  this  paper  were 
established  to  fulfill  the  intent  of  the  DDR&E  Directive  referred  to 
above,  and  provide  a realistic  basis  for  comparative  analysis  of 
systems  or  components  prior  to  their  selection  for  any  specific  DOD 
application.  The  resulting  data  enables  the  Air  Force  to  select  the 
best  available  equipment  for  either  future  weapon  system  development 
or  modification  of  existing  systems. 

2.  ORGANIZATION 

The  6585th  Test  Group's  Central  Inertial  Guidance  Test  Facility 
(CIGTF),  with  the  support  of  other  Test  Group  agencies  and  several 
test  ranges,  provides  the  capability  for  complete  test  and  performance 
evaluation  of  inertial  navigation  systems.  This  permits  unbiased 
performance  evaluation  under  conditions  closely  simulating  an 
operational  environment  at  a cost  less  than  contractor  testing. 

The  CIGTF  manages  the  overall  program  during  these  tests.  In 
addition  to  identifying  resource  requirements  and  preparing  test 
plans  and  program  documentation,  the  CIGTF  performs  laboratory  tests, 
maintains  all  instrumentation  support  equipment,  including  the 
Completely  Integrated  Reference  Instrumentation  System  (CIRIS),  analyzes 
the  test  data,  and  prepares  engineering  and  analysis  reports. 
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The  6585th  Test  Group's  Aeronautical  Test  Division  maintains  and 
modifies  the  aircraft  palletized  testbeds  on  which  test  systems  are 
flown,  and  is  responsible  for  the  operational  conduct  of  the  flight 
test. 

3.  TYPES  OF  TESTS 

Flight  test  programs  are  divided  into  two  categories:  Developmental 

programs  and  verification  programs.  Developmental  tests  of  early 
prototype  equipment  provides  information  for  design  improvement  and 
performance  evaluation.  Verification  tests  are  performed  on  systems 
which  are  well  along  in  the  development  cycle,  and  which  have  normally 
undergone  some  previous  dynamic  testing.  This  paper  discusses  primarily 
system  verification  tests;  however,  many  of  the  concepts  apply  equally 
to  developmental  tests. 

The  types  of  system  navigation  mechanizations  which  are  tested 
include  pure  (unaided)  inertial,  doppler  heading  reference,  conventional 
doppler-inertial , Kalman  doppler-inertial  , loran-inertial , doppler- 
inertial-loran,  and  stel 1 ar-inertial -doppler.  Systems  may  employ 
different  alignment  schemes  including  ground,  air,  and  transfer  of 
alignment.  A basic  verification  test  program  is  outlined  in  Table  I. 

The  types  of  testbed  aircraft  currently  in  use  for  verification 
flight  tests  are  C-141  transport,  the  RF-4C  fighter,  and  an  Army  (UH-1H) 
helicopter.  A limited  amount  of  ground  testing  is  done  for  every 
verification  program,  and  van  testing  is  available. 

4.  TEST  OBJECTIVES 


The  principal  goal  of  a verification  program  is  to  provide  a fair, 
impartial,  and  rigorous  system  evaluation  under  standardized  conditions. 
The  program  determines  the  navigation  performance  and  operational 
suitability  of  the  navigation  system  through  a series  of  ground  and 
flight  tests.  The  standardized  test  conditions  correspond  as  closely 
as  possible  to  those  expected  operationally.  Strengths  and  weaknesses 
of  the  systems  are  identified.  Other  government  agencies  may  use  this 
information  to  compare  systems  of  the  same  type,  and  to  choose  the 
best  system  for  new  avionics  applications. 

5.  TEST  APPROACH 


The  basic  verification  program  for  an  inertial  navigation  system  is 
outlined  in  Table  I.  It  consists  of  four  phases:  pre-delivery,  ground, 

transport,  and  intended  mission  application  test  phases.  Each 
system  must  advance  through  each  of  these  phases  in  the  above  order. 
Systems  intended  for  several  potential  applications  may  require  testing 
in  all  three  aircraft  testbeds. 
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TABLE  I 


PHASE 

WEEKS 

0 Predelivery  Ground  Tests 
2 Static  Nav  Tests 

(1  day) 

I-A  Standard  Ground  Tests 

1-3  Functional  Checkout  Tests 

2 Static  NAV  Tests 

3 Scorsby  Tests 

1 Heading  Sensitivity  Tests 

2-4 

I-B  Special  Ground  Tests 

0-3  Special  Analysis  Tests 
0-3  Special  Application  Tests 

0-2 

II  NC-141A  Cargo  Flight  Tests 

8-12 

1-2  Functional  Checkout  Flights 
6 West  84  Min  Cruise  Profile  and  Return 
6 North  84  Min  Cruise  Profile  and  Return 
3 East  84  Min  Cruise  Profile  and  Return 
1-?  Terminate  at  a Distant  Point/R0N/&  Return 

0- 3  Special  Analysis 

III-A  UH-1H  Helicopter  Flight  Tests  8-10 

1- 2  Functional  Checkout  Flights 

6 East  42  Min  Cruise  Profiles  and  Return 
6 North  42  Min  Cruise  Profiles  and  Return 
6 East  Terrain  Mapping  Missions 

0- 6  Special  Analysis  Flights 

III-B  RF-4C  Fighter  Flight  Tests  8-12 

1- 2  Functional  Checkout  Flights 

6 West  42  Min  Cruise  Profiles  and  Return 
6 West  42  Min  Cruise/Simulate  Ordnance 
Delivery  Profiles  and  Return 
6 West  42  Min  Cruise/Simulate  Air  Combat 
Maneuvers  and  Return 

2- 4  Special  Analysis  Flights 

III-C  Extended  NC-141  Cargo  Flight  Tests  4-8 

0-1  Functional  Checkout  Flights 
2-3  West/NW  168  Min  Cruise  Profiles  and 
Return 

2-3  East  168  Min  Cruise  Profiles  and 
Return 

1 East/SE/terminate  at  distant  point/RON/ 
and  Return 

0-3  Special  Analysis  Flights 


RON  - Remain  Over  Night 
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FLIGHTS 

0 

(7-9  tests) 

0-6  tests) 
17-22 

19-26 

21-24 

5-11 


The  basic  program  outlined  in  Table  I is  the  minimum  required  to 
verify  the  primary  alignment  and  navigation  mode  of  the  inertial 
navigation  system.  The  objective  of  the  verification  is  to  establish 
a level  of  statistical  confidence  in  the  performance  of  the  system 
for  its  primary  operating  mode  in  a typical  operational  environment. 

Many  systems  will  have  more  than  a single  alignment  and  navigation 
mode.  In  addition,  a system  may  be  intended  for  a unique  operational 
flight  profile  which  is  not  adequately  considered  in  the  basic  test 
program.  Consequently,  a test  program  will  frequently  include 
additional  flights  beyond  the  requirements  of  Table  I. 

A fair  and  valid  verification  test  program  is  conducted  by  adhering 
to  the  following  strict  test  discipline.  The  system  is  operated  and 
tested  solely  by  Air  Force  personnel.  Also,  Air  Force  personnel  will 
determine  the  validity  and  usability  of  test  data,  and  resolve  all 
day-to-day  operational  test  problems.  This  includes  all  test  scheduling 
and  declaring  whether  the  system  is  ready  for  test  or  out  for  maintenance. 
All  necessary  maintenance  and  repair  of  the  system  and  its  support 
equipment  is  controlled  by  Air  Force  personnel. 

A complete  record  is  kept  of  pertinent  data,  such  as  system  operating 
time,  reaction  times,  system  maintenance,  and  any  special  modifications 
to  system  configuration.  Detailed  operating  and  checkout  procedures 
and  test  schedules  are  established  prior  to  each  test. 

6.  VERIFICATION  TEST  PHASES 

a.  Pre-Delivery  Ground  Test  (Phase  0) 

The  purpose  of  this  test  is  to  obtain  a confidence  that  the 
system  to  be  delivered  to  Holloman  Air  Force  Base  will  function  within 
the  limits  required.  This  test  is  designed  as  a functional  check  to 
be  performed  at  the  Contractor's  facility,  witnessed  by  Air  Force 
personnel,  prior  to  delivery  to  Holloman  Air  Force  Base. 

b.  Standard  Ground  Test  Series  (Phase  I) 

(1)  The  purpose  of  Phase  I is  to  insure  that  the  test  system  is 
in  a satisfactory  operational  condition  after  shipment  to  Holloman  Air 
Force  Base  and  prior  to  entering  the  cargo  flight  test  phase.  During 
this  phase,  initial  system  and  instrumentation  equipment  installation 
are  accomplished  on  the  selected  C-141  testbed  pallet,  and  appropriate 
Class  II  modification  documentation  is  started. 
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(2)  For  laboratory  evaluation  of  system  accuracy  during 
Phase  I,  the  system  will  normally  be  operated  for  two  6-hour  static 
navigation  runs  and  three  6-hour  Scorsby  runs  (see  Figure  1).  These 
runs  will  be  performed  with  the  system  at  nominal  ambient  temperatures. 
If  necessary,  platform  cool  down  between  tests  can  be  accelerated  with 
refrigerated  air.  The  Scorsby  rate  will  be  six  cycles  per  minute  at 

+ 3°  amplitude  (6°  peak-to-peak  swing).  During  one  of  the  static  tests 
and  one  of  the  Scorsby  tests,  the  system  will  be  rotated  to  the  four 
cardinal  headings  at  intervals  of  84  minutes.  During  the  Scorsby 
tests,  the  table  amplitude  will  be  gradually  reduced  to  zero  prior  to 
turning  the  system  to  a new  heading,  and  then  gradually  increased  back 
to  + 3°.  Turning  rate  will  approximate  an  aircraft  turn  rate  of  about 
180  degrees/minute. 

(3)  The  heading  sensitivity  test  described  in  the  paragraph 
above  will  be  complemented  by  a second  form  of  heading  sensitivity  test 
for  comparison  purposes.  This  test  will  consist  of  84-minute  static 
runs  at  each  of  the  four  cardinal  headings,  with  each  cardinal  run 
being  preceded  by  a 20-minute  realignment  with  the  platform  pointed 
northward.  The  initial  alignment  will  follow  a warmup  period 
sufficient  to  preclude  the  effects  of  temperature  transients. 

c.  Cargo  Test  (Phase  II) 

(1)  Table  I outlines  the  number  of  tests  to  be  conducted 
during  Phase  II.  The  number  of  valid  data  flights  required  is  a 
function  of  system  configuration  and  operating  modes,  normally  requiring 
from  17  to  22  flights. 

(2)  In  Phase  II  the  system's  navigation  performance  is  tested 
on  different  headings.  Some  missions  consist  of  North-South  profiles; 
others  will  be  East-West  profiles.  The  number  of  turns  are  minimized 
though  altitudes  and  air  speeds  may  vary.  Missions  will  usually  be 

out  and  back  profiles,  although  at  least  two  will  terminate  at  locations 
over  500  miles  distance  from  the  takeoff  point. 

(3)  Many  systems  will  have  more  than  a single  alignment  and 
navigation  mode.  In  addition,  a system  may  be  intended  for  a unique 
operational  flight  profile  which  is  not  adequately  considered  in  the 
basic  test  program.  Consequently,  the  test  program  will  sometimes 
include  additional  flights  beyond  the  requirements  of  Table  I.  If  the 
system  has  a potential  application  as  a long  duration  navigator,  it 
will  undergo  extended  cargo  testing  (Phase  III-C)  prior  to  advancing 
to  helicopter  or  fighter  test  phases. 
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d.  Helicopter  Test  Series  (Phase  III-A) 

Table  I outlines  the  nunber  of  tests  to  be  conducted  during 
this  phase  of  testing.  The  number  of  valid  data  flights  required  is 
a function  of  system  configuration  and  operating  modes,  normally  in 
the  range  of  19-26  sorties.  See  Appendix  A for  helicopter  flight 
profiles. 

System  performance  as  determined  from  the  flight  sorties  flown 
will  be  compared  with  the  criteria  specified  for  advancement;  and  if 
the  test  system  has  a potential  for  possible  fighter  applications,  the 
system  will  advance  to  fighter  test  phase. 

e.  Fighter  Test  (Phase  III-B) 

(1)  Table  I outlines  the  number  of  tests  to  be  conducted 
during  this  phase  of  testing.  The  number  of  valid  data  flights  required 
is  normally  in  the  range  of  21-24  sorties.  The  types  of  missions  flown 
are  discussed  in  Appendix  A. 

(2)  The  project  (nose)  pallet  will  be  installed  in  the  RF-4C 
testbed  (Figure  4),  and  power  and  signal  interfaces  will  be  verified. 

(3)  The  flight  test  portion  of  this  phase  will  begin  with  a 
number  of  checkout  flights.  When  the  data  recording  and  system 
performance  are  acceptable,  performance  testing  will  conriense. 

f.  Phase  Advancement  Criteria 

(1)  The  results  of  the  valid  tests  during  each  phase  will  be 
the  fundamental  basis  for  allowing  the  test  program  to  proceed  during 
a phase,  and  for  allowing  advancements  to  the  next  phase.  To  advance 
to  Phase  II,  the  system  must  successfully  complete  the  required  tests 
in  Phase  I (Table  I).  The  last  two  consecutive  Scorsby  tests  must  be 
valid  data  tests,  and  the  system  indicated  radial  position  error  must 
be  below  a 3-nautical  mile  per  hour  envelope. 

(2)  Phase  II  contains  the  aircraft  integration  portion  of  the 
NC-141A  flight  test  program.  During  this  phase,  missions  are  flown  to 
collect  the  data  necessary  for  an  analysis  of  the  INS  performance.  The 
system  passes  into  Phase  III  after  successful  completion  of  the  Phase  II 
tests  outlined  in  Table  I.  In  Phase  III  the  system  must  successfully 
complete  a series  of  special  application  performance  flights  in  the 
testbed(s)  selected. 
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(3)  If  the  system  repeatedly  fails  to  meet  any  of  the  criteria 
for  advancement  into  each  phase,  the  system  may  be  recalibrated  as 
required  and  the  test  repeated.  Should  it  be  determined  at  any  time 
during  the  test  program  that  the  system  does  not  have  sufficient  merit 
to  warrant  further  testing,  the  project  will  be  terminated. 

g.  System  Substitutions  and  Repair 

(1)  The  primary  purpose  of  verification  testing  is  to  evaluate 
the  performance  and  operational  suitability  of  the  test  system,  or  systems, 
as  accurately  as  possible  in  a minimum  amount  of  time.  It  is  also 

Air  Force  policy  to  gather  as  much  maintainability  and  reliability 
information  as  can  be  obtained  during  this  test  process.  Consequently, 
the  Air  Force  exercises  strict  control  over  verification  test  systems 
configurations.  Multiple  substitutions  are  avoided  whenever  possible, 
and  repair  or  replacement  of  minor  subcomponents  is  preferred  to  major 
component  substitutions. 

(2)  Developmental  test  policies  are  not  nearly  as  strict,  and 
efforts  are  primarily  confined  to  maintaining  correct  documentation. 

7.  FLIGHT  TEST  INSTRUMENTATION  AND  DATA  COLLECTION 


a.  Instrumentation  for  any  given  project  will  depend  to  a large 
extent  on  the  type,  quantity  and  accuracy  of  data  required. 

b.  System  data  will  ordinarily  be  recorded  on  magnetic  tape.  The 
type  of  data  collected  may  be  separated  into  two  categories.  The  first 
category  is  that  required  to  determine  quantitatively  the  system 
accuracy.  Typically,  position,  velocity,  and  attitude  data  are  of 
interest.  The  second  category  is  that  required  for  analysis  and  trouble- 
shooting the  system.  Data  recorded  for  analysis  purposes  may  be  rather 
extensive  for  complex  system,  and  may  include  any  data  available, 
internal  or  external  to  the  inertial  navigation  system,  which  might  aid 
in  isolating  individual  system  error  sources. 

c.  In-flight  reference  data  is  ordinarily  obtained  from  FPS-16 
radars,  cinetheodolites,  DOVAP,  on-board  vertically  stabilized  camera, 
or  CIRIS.  Table  II  lists  typical  position,  velocity  and  attitude 
accuracies  and  coverage  available  from  these  sources. 

d.  The  CIGTF  recently  accomplished  a highly  significant  increase 

in  the  C-141  in-flight  reference  capability  with  the  in-house  development 
of  the  Completely  Integrated  Reference  Instrumentation  System  (CIRIS) 

(see  Appendix  B). 
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CIRIS  output  is  available  every  second  when  generated  post-flight 
and  every  five  to  ten  seconds  in  real-time.  The  output  is  available  in 
all  three  axis,  and  has  the  following  accuracies  (1  sigma): 

Position  13  ft 

Velocity  .1  ft/sec 

Attitude  3 arc  minutes 

These  accuracies  exceed  what  is  required  for  most  guidance  system  tests, 
and  is  comparable  to  or  better  than  cinetheodolite  and  laser  ranging 
systems,  and  has  many  advantages  not  shared  by  these  and  other  systems. 

A major  characteristic  of  CIRIS  is  the  fact  that  the  velocity  data  is 
generated  from  acceleration  and  incremental  position  measurements 
rather  than  by  position  di fferentiation  techniques  that  are  inherently 
noise  producing  procedures.  Thus,  better  quality  velocity  data  is 
produced. 

CIRIS  was  designed  to  provide  continuous  highly  accurate  reference 
data  that  is  available  over  long  flight  paths  in  any  direction.  This 
capability  is  most  important  to  navigation  systems  testing.  Most  naviga- 
tion systems  use  inertial  sensors  on  local  level  stabilized  platforms 
that  exhibit  an  oscillating  error  characteristic  with  an  84-minute 
period  known  as  the  "Schuler"  period.  Test  missions  are  usually  flown 
in  one  direction  along  a cardinal  heading  (east-west  or  north-south)  to 
separate  individual  instrument  (gyros  and  accelerometers)  contributions 
to  the  system  error  accumulation.  CIRIS  supports  these  long  flight 
tests  anywhere  within  150  nautical  miles  of  land,  due  to  a requirement 
for  line-of-sight  radio  communication  with  ground-based  transponders . 
CIRIS  operation  over  wide  areas  and  at  diverse  locations  is  a unique 
capability  for  a high  accuracy  reference  system. 

The  availability  of  real-time  high  accuracy  CIRIS  reference  data  and 
digital  processing  have  enhanced  test  capability  by  supporting  tests  in 
ways  not  fo-Tnerly  possible.  For  example,  accurate  all-weather  flight 
path  control,  repeatable  flight  profiles,  time-to-target  predictions, 
and  air-alignment  data  transfers  have  been  accomplished  by  using  CIRIS 
data.  In  addition,  CIRIS  hardware,  including  doppler  radar  and  air  data 
(barometric  altitude),  have  been  used  as  inputs  to  test  systems. 

CIRIS  has  significantly  reduced  the  effects  of  scheduling  constraints 
by  supporting  tests  on  weekends  when  airspace  is  available,  and  by 
allowing  independence  from  the  need  to  fly  in  restricted  ranges.  CIRIS 
has  been  used  to  instrument  data  acquisition  for  limited  quick-response 
tests,  and  has  minimized  the  need  for  immediate  post-flight  data 
reduction.  Thus,  significantly  more  testing  can  be  accomplished  and 
with  better  data  quality  control  due  to  the  visibility  provided  by  the 
availability  of  CIRIS  data  processed  in  real-time. 


e.  Minicomputer  Instrumentation 


(1)  Rapid  advances  in  the  state-of-the-art  of  digital  cosnputers 
have  brought  revolutionary  changes  in  test  instrumentation.  Significant 
reduction  in  the  size  and  cost  of  general-purpose  digital  computers 
(minicomputers)  has  resulted  in  extensive  use  of  these  minicomouters  to 
acquire  data  directly  from  the  test  item  and  use  the  computation 
caoabilities  to  scale  and  display  the  test  item  data  on  a real-time 
basis.  The  development  of  low-cost  graphic  terminals,  such  as  the 
Tektronix  4010  series,  has  enabled  us  to  display  the  test  item  data 
both  al phanumeri cal ly  and  graphically.  In  particular,  key  parameters 
which  can  indicate  to  the  test  engineer  the  functional  operation  of 
his  test  item  can  now  be  displayed  in  a manner  which  makes  it  much 
easier  to  analyze  the  performance  of  his  system.  This  particular 
feature  of  the  instrumentation  is  extremely  important  when  the  test 
schedule  is  short  and  decisions  regarding  additional  test,  or  soft- 
ware/hardware modifications  must  be  based  on  observed  test  item  performance 
In  addition,  each  pallet  is  equipped  with  a digital  recorder  so  that  all 
of  the  test  item  data  can  be  recorded  for  post-flight  reduction  and 
analysis. 


(2)  The  improvements  have  not  been  limited  to  the  flexible 
and  reliable  data  acquisition,  control  and  display  capabilities  of 
computer  control  instrumentation,  but  has  been  an  important  tool  to 
provide  what  is  referred  to  as  "quick-look"  capability.  "Quick-look" 
is  essentially  the  ability  to  obtain  timely  information  concerning  the 
results  of  a test  (that  has  been  recorded  on  magnetic  tape)  which  affect 
the  schedules  and/or  quality  of  further  tests. 

(3)  The  time  constraints  imposed  on  flight  testing  due  to 
aircraft  scheduling  and  support  coordination  affect  the  data  acquisition 
equipment  and  the  test  system  performance.  Each  test  mission  records 
this  data  on  magnetic  tane.  This  information  can  impact  decisions  to 
repair  equipment,  alter  mission  schedules,  perform  calibrations,  change 
test  plans,  repeat  or  change  test  profiles  and  numerous  other  decisions 
that  lead  to  timely  and  cost  effective  testing. 

(4)  Software  has  been  developed  that  effectively  uses  the 
capabilities  of  minicomputers  and  peripherals  post-flight  in  a ground 
station  to  provide  the  "quick-look"  capability  described.  It  is 
important  to  note  that  this  post-flight  capability  does  not  duplicate 
the  real-time  data  display  which  may  also  affect  decisions  of  a similar 
nature,  but  is  totally  dependent  on  recorded  data  which  must  be  used 
for  system  evaluation  by  test  analysts.  The  simplicity  of  operation  can 
best  be  illustrated  for  a recent  test  program.  Thirty  minutes  after 
the  first  data  tape  had  been  recorded,  a plot  of  position  versus  time 
had  been  generated. 
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(5)  The  minicomputer  is  an  effective  tool  for  generating 
needed  information  in  a timely  manner.  Analysis  of  data  tapes  for  the 
purpose  of  test  quality  control  had  advanced  the  flight  test  capability 
providing  significant  improvements  in  response  time  to  events  that 
might  have  otherwise  gone  unnoticed  prior  to  the  next  mission. 

8.  TESTBED  AIRCRAFT 


Flight  testing  efforts  over  the  last  several  years  revealed  that  a 
new  type  of  testbed  aircraft  (TBA)  was  needed.  In  the  past,  precious 
time  was  wasted  when  the  aircraft  had  to  be  modified  to  accommodate  a 
new  test  item.  Modifications  of  aircraft  are  a time-consuming  operation, 
since  every  modification  must  be  carefully  controlled  for  flight  safety, 
and  design  procedures  are  so  detailed  that  each  modification  takes 
considerable  time.  An  increasing  workload  and  the  reduction  of  available 
aircraft  testbeds  made  the  design  of  a new  TBA  essential.  This  new 
aircraft  was  designed  to  incorporate  a palletized  concept  so  that  the 
testing  of  any  new  system  would  require  a minimum  amount  of  modification 
to  the  aircraft.  In  addition,  the  TBA  can  accommodate  testing  of 
several  test  systems  simultaneously  so  that  available  aircraft  time  can 
be  used  more  cost  effectively. 

A C-141  aircraft,  modified  to  allow  the  CIGTF  to  test  up  to  five 
different  systems  simultaneously,  with  a minimum  amount  of  aircraft 
downtime,  was  designed  to  satisfy  the  TBA  requirements.  The  key  element 
in  the  design  was  the  decision  to  place  all  test  items  and  test  instru- 
mentation on  aircraft  pallets.  Each  of  five  pallet  stations  on  the 
aircraft  is  equipped  with  an  interface  junction  box  for  power  and  signal 
transmission  to  the  pallet.  Thus,  the  interface  between  the  aircraft 
and  test  item  is  reduced  to  a set  of  cables  that  provide  aircraft  power 
(115  volts,  400  Hz,  and  28  volts  dc),  and  signal  data  ( I R I G time, 
aircraft  intercom  and  station-to-station  data  exchange).  Additionally, 
to  minimize  test  downtime  if  a test  item  has  to  be  removed  from  the 
aircraft,  the  test  item  pallets  w re  designed  to  facilitate  quick 
removal  and  installation.  Figure  5 depicts  the  installation  of  a pallet 
on  the  aircraft.  Installation  or  removal  takes  about  15  minutes  per 
pallet,  and  all  five  pallets  can  be  removed  and  reinstalled  in  less 
than  three  hours. 

a.  Testbed  Instrumentation 

To  facilitate  testing  of  the  test  snecimen,  common  instrumentation 
is  permanently  installed  in  the  TBA.  These  include  a vertically 
stabilized  camera  for  photographic  position  checkpoint  data;  master 
TRIG  time  generator  for  precision  time  reference;  air  data  computer 


for  barometric  altitude,  true  air  speed,  and  outside  air  temperature; 
and  a doppler  radar  for  velocity  information.  The  vertically  stabilized 
camera  and  associated  ODtical  sighting  displays  (modernized  drift 
sites)  allow  the  test  team  to  take  reference  data  while  flying,  and 
generate  quick-look  plots  that  can  be  used  to  determine  if  gross  errors 
exist  in  the  test  specimen.  This  combination  of  instrumentation  provides 
a wide  range  of  instrumentation  data  that  can  be  obtained  via  the  signal 
connector  (located  in  each  pallet  junction  box)  without  any  requirement 
to  modify  the  aircraft  or  install  duplicate  instrumentation  devices  on 
each  test  i tern  pallet. 

b.  Test  Item  Pallet 


A general  test  item  pallet  configuration  provides  flexibility 
of  data  acquisition  and  display  or  test  item  equipment  on  each  pallet, 
thereby  minimizing  the  time  to  implement  design  changes.  Items  that 
are  common  to  most  tests  were  identified  and  allocated  space  on  the 
pallet.  These  items  include  a minicomputer,  400/60-Hz  power  converter, 
IRIG  time  generator,  magnetic  tape  recorder,  operator's  display,  and 
an  air  conditioner  (Figure  6).  The  IRIG  time  generator  is  synchronized 
with  the  master  generator  before  take-off  to  provide  redundant  timing 
or  to  repeat  and  display  a visual  readout  from  the  master  generator. 
Cooled  air  is  provided  for  the  test  item  (if  required)  and  other 
pallet  instruments. 

9.  DATA  REDUCTION,  ANALYSIS  AND  REPORTING 

All  data  are  processed  and  controlled  by  Air  Force  personnel  at  the 
Central  Inertial  Guidance  Test  Facility  except  range  tracking  data 
which  are  processed  by  the  US  Army  at  White  Sands  Missile  Range,  New 
Mexico,  Fort  Huachuca,  Arizona,  and  at  the  Space  and  Missile  Test 
Center,  California. 

a.  System  Data  Reduction 

(1)  Systems  normally  output  data  in  digital  form.  The  data 
are  recorded  on  magnetic  tapes  making  it  possible  to  do  the  necessary 
processing  directly  using  ground  based  computational  equipment.  If  a 
system  outputs  data  in  analog  form,  these  data  are  first  digitized  at 
the  CIGTF  prior  to  data  reduction. 

(2)  When  radars  or  cinetheodolites  are  used  as  the  position 
and  velocity  reference,  system  and  reference  data  are  normally  compared 
at  10  second  intervals.  When  a vertical  camera  is  used  for  reference 
instrumentation,  system  position  data  are  needed  additionally  at  check- 
point times  (usually  every  three  to  five  minutes). 
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FIGURE  6.  TEST  ITEM  PALLET. 


(3)  The  length  of  time  required  to  reduce  system  data  varies 
considerably  depending  on  the  method  of  data  recording.  Analog  tapes 
usually  require  a week  or  more  to  digitize.  Digital  tapes  may  be  placed 
directly  on  the  land  based  computer  for  further  reduction.  Hand 
recorded  data  are  usually  punched  onto  cards  within  one  to  two  days  for 
further  reduction. 

b.  Reference  Data  Reduction 

(1)  During  on-range  flights,  radar  data  are  magnetically  recorded 
at  10  or  20  frames  per  second.  The  data  are  thinned  to  one  frame  per 
second  and  a single  station  solution  is  used  to  find  reference  latitude, 
longitude,  and  MSL  altitude.  Cinetheodolite  data  are  usually  recorded 

at  one  frame  per  second.  Film  from  two  or  more  cinetheodol ites  are 
reduced  using  a multiple  station  solution  to  obtain  reference  latitude, 
longitude,  and  MSL  altitude. 

(2)  During  off-range  flights,  aerial  photographs  are  made  of 
surveyed  ground  checkpoints.  Miss  distances  are  read  from  the  film  and 
added  to  checkpoint  coordinates  to  obtain  reference  latitude  and 
longitude. 

(3)  The  time  required  for  reference  data  reduction  is 

approximately  as  follows:  10  to  30  days  for  radar  data,  20  to  40  days 

for  cinetheodolite  data,  2 to  5 days  for  photo  data,  C IRIS  data  within 
hours  after  flight.  The  time  required  over  and  above  the  minimum  quotes 
is  primarily  a function  of  the  range  workload  and  problems  encountered 
in  reducing  the  data. 

c.  Error  Data  Reduction 

(1)  Position  error  information  is  obtained  by  computing  the 
difference  between  system  indicated  data  and  reference  data.  Time 
synchronization  is  achieved  by  recording  IRIG-B  time  with  both  system 
and  reference  data.  Range  reference  time  is  derived  from  a master  range 
timing  station  through  land  line  and  microwave  relay.  The  system 
timing  reference  is  recorded  directly  from  an  onboard  IRIG-B  time 

code  generator.  Using  this  method,  a time  synchronization  within  one 
millisecond  between  range  reference  data  and  system  data  is  achieved. 

(2)  During  off  range  flights,  system  data  are  recorded  as  close 
to  checkpoint  photographs  times  as  possible.  Proper  timing  for  error 
plots  is  accomplished  in  analysis  and  data  processing. 


d.  Nimber  of  Samples 


(1)  The  purpose  of  testing  is  to  collect  sufficient  data  to 
reasonably  estimate  how  the  system,  indeed  any  article  under  test,  will 
perform  in  routine  service.  The  more  tests  that  are  run,  the  more 
confidence  can  be  given  to  the  results.  Statistics  provide  a 
quantitative  measure  of  this  confidence.  The  following  is  a short 
discussion  of  the  statistics  used  to  determine  the  least,  yet 
statistically  valid,  number  of  tests  that  should  be  performed: 

(a)  Suppose  N representative  samples,  the  test  measurements, 
are  made  of  the  variable  of  interest,  say  X.  Then  the  sample  Circular 
Error  Probable,  CEP,  and  sample  standard  deviation,  S,  are  easily 
calculated.  These  statistical  measures  apply  to  the  test  results  only. 

To  determine  the  CEP,  and  o for  the  entire  population  (the  same  measure- 
ment applied  to  operational  systems)  requires  the  application  of 
Statistical  Analysis.  These  statistics  have  been  simplified  in 
Figure  7 for  the  ratio  CEP  to  CEF. 

(b)  Assume  the  same  sample  of  N gives  a value  of  C?F. 

From  Figure  7,  the  value  CEP  < K^rp  CEP  is  determined  to  any  level  of 
confidence  desired.  For  exampTe,  assume  N = 6,  CeF  = l.C,  then: 

CEP  <_  1.04  with  50%  confidence, 

CEP  ^1.22  with  75%  confidence, 

CEP  <_  1.60  with  95%  confidence. 

(c)  Furthermore,  with  N - 14  samples  and  'CZP  = 1.0  (for 
simplicity,  recognizing  the  computed  CEP  would  probably  change) 

Figure  7 gives: 

CEP  <_  1.01  with  50%  confidence, 

CEP  1.12  with  75%  confidence, 

CTF  <1.30  with  95%  confidence. 

(d)  Similar  analysis  can  be  applied  to  other  measures  of 
the  sample  statistics  such  as  mean  and  standard  deviation.  However, 
each  one  has  a separate  confidence  curve  such  as  given  in  Figure  7 for 
CEP. 


(2)  For  good  statistical  confidence,  a large  number  of  samples 
should  be  used  (20,  30  or  more).  In  practice  this  would  be  prohibitive 
in  cost  and  furthermore,  the  "value"  of  additional  tests  (in  terms  of 
improved  confidence)  reduces  rapidly  as  the  number  of  tests  increases. 
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For  these  reasons  and  from  the  experience  of  many  test  programs,  the 
rule  of  thumb  has  been  adopted  that  six  (6)  samples  are  required  for 
reasonable  results.  This  is  tempered  with  cost  and  occasionally  less 
samples  will  be  accepted.  Likewise,  when  the  opportunity  presents 
itself  to  collect  additional  data  at  minimum  cost,  more  samples 
are  used. 

e.  Cumulative  Radial  Error  Accuracy  Results 

(1)  Cumulative  radial  error  accuracy  results  will  usually  be 
derived  by  considering  tests  in  different  environments  (static,  Scorsby, 
C-141,  RF-4C,  or  helicopter)  as  separate  ensembles.  Tests  may  be 
combined,  however,  if  system  performance  is  not  significantly  affected  by 
different  environments.  For  example,  static  and  Scorsby  tests  may  often 
be  combined  when  making  ensemble  accuracy  calculations.  If  more  than 
one  navigation  or  alignment  mode  is  tested  in  the  same  environment, 

the  tests  in  each  individual  mode  will  normally  be  considered  as  a 
separate  ensemble. 

(2)  Measures  of  performance  calculated  for  inertial  systems 
for  ensembles  of  six  or  more  tests  include: 

(a)  Mean  and  median  errors. 

(b)  50th  percentile,  CEP,  and  90th  percentile  error. 

(c)  85%  confidence  limits  on  the  CEP. 

(d)  Least  squares  position  error  rate  (when  meaningful). 

(e)  RMS  error  (when  meaningful). 

These  statistics  are  calculated  for  position  and  velocity  errors  when 
sufficient  data  are  available.  Items  a through  c are  calculated  as  a 
function  of  time,  usually  at  5 minute  intervals.  Items  d and  e are 
presented  as  single  numbers  when  the  statistics  are  meaningful.  A 
least  squares  position  error  rate  will  ordinarily  be  presented  only  for 
pure  inertial  systems  which  have  a position  error  growth  which  is  nearly 
1 inear  with  time. 

f . Estimation  of  System  Error  sources 

Error  analysis  is  focused  on  determining  the  principal  sources 
of  overall  system  position,  velocity,  and  attitude  errors.  The 
techniques  used  will  depend  upon  the  particular  system  mechanization.  The 
extent  of  error  analysis  depends  on  the  time  and  manpower  available  to 
develop  and  implement  the  desired  analysis. 
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g.  lest  tvent  Reports 

Test  data  and  preliminary  test  results  are  available  to  the 
customer  as  soon  as  possible  after  each  test.  Normally,  a quick-look 
error  plot,  to  include  any  significant  occurrences,  is  available 
immediately  after  each  test  event. 

h.  Data  Packages 

For  test  programs  which  require  performance  accuracy  data  to  be 
released  as  soon  as  possible,  data  packages  will  be  prepared  two  weeks 
after  each  phase  of  testing. 

i . Final  Report 

(1)  After  the  completion  of  testing,  a final  report  is  prepared. 
This  will  contain  all  results  of  the  test  program,  including  the  data 
presented  previously  in  data  packages.  Information  reported  will 
customarily  include: 

(a)  Overall  test  program  review. 

(b)  Test  objectives  and  procedures. 

(c)  Physical  characteristics  of  the  system. 

(d)  Performance  accuracy  results. 

(e)  Error  analysis  results. 

(f)  Operational  suitability  comments. 

(g)  Data  reduction  and  analysis  techniques. 

(h)  Test  instrumentation. 

(i)  Maintenance  and  repair  log. 

(2)  Position  and  velocity  accuracy  results  will  include  plots 
of  the  following  quantities  as  functions  of  time  in  the  navigation  mode: 

(a)  For  each  fl ight--latitude,  longitude,  radial  position 
and  velocity  errors. 

(b)  Cumulative  results-- 

1_  Mean,  median,  50th  percentile,  and  90th  percentile 
of  radial  position  and  velocity  errors; 

2^  CEP  and  85%  confidence  limits  on  the  CEP  of  radial 
position  and  velocity  errors; 

_3  a composite  of  radial  position  and  velocity  errors 
for  all  valid  data  flights  in  each  phase. 
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j.  Data  Distribution  and  Classification 


(1)  Initial  distribution  of  all  data  and  test  results  are 
controlled  by  CIGTF.  Distribution  lists  (designated  by  the  customer/CIGTF) 
will  be  contained  in  the  specific  system  test  plan.  Contractor 
proprietary  rights  are  observed. 

(2)  Test  data  and  results  are  accorded  a security  classification 
commensurate  with  the  program  and  system  under  test. 

10.  RECENT  TEST  PROGRAMS  AT  THE  CIGTF 


a.  Since  aircraft  inertial  navigation  systems  flight  testing  began  at 
the  CIGTF  in  1964,  40  systems  have  undergone  verification  or  developmental 
testing.  Six  systems  are  currently  in  active  testing  or  in  report. 
Appendix  C contains  a detailed  tabulation  of  the  test  efforts.  The 
following  is  a brief  description  of  several  verification  and  developmental 
tests  recently  completed  at  the  CIGTF. 

(1 ) Singer-Kearfott  SKN-2400  INS 

The  Singer-Kearfott  SKN-2400  INS  was  subjected  to 
verification  testing  February  1973  until  April  1974.  The  system  was  flown 
in  NC-141A,  UH-1H  and  RF-4C  aircraft.  A total  of  178  flying  hours  and 
764  operating  hours  were  accumulated  during  the  test.  During  the  testing 
several  production  line  assembly  technique  problems  were  identified  and 
corrected.  The  helicopter  testing  identified  a low  frequency  sensitivity 
that  was  easily  corrected.  The  SKN-2400  was  found  to  be  easily 
maintainable  and  in  the  "one  mile  per  hour"  class.  It  was  successfully 
verified  for  the  cargo,  helicopter  and  fighter  aircraft.  The  SKN-2400 
has  been  selected  as  the  F-16  INS,  and  is  proposed  for  the  C-141  retrofit 
program. 


(2)  Litton  LTN-72  INS 


The  Litton  LTN-72  INS,  an  in-production  ARINC  specification 
INS,  was  subjected  to  verification  testing  from  January  through  August  1975. 
The  LTN-72  was  flown  in  the  NC-141A  only,  as  its  application  is  limited  to 
cargo/bomber  type  aircraft.  The  LTN-72  INS  was  flown  in  the  CONUS  and 
in  Alaska.  The  system  was  found  to  be  less  than  one  mile  per  hour  and 
was  successfully  verified  for  cargo  type  aircraft.  The  LTN-72  is  being 
proposed  for  the  C-141  retrofit  program. 

(3)  B-l  Navigation  System 


The  B-l  Navigation  System,  consisting  basically  of  the 
LN-15S  platform,  the  AN/APN-185  doppler  radar,  the  AN/APN- 1 94  radar 
altimeter,  and  the  SKC-2070  computer  was  subjected  to  development  testing 
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between  June  1974  and  August  1975.  The  objective  was  to  check  out 
the  navigation  portion  of  the  Offensive  Flight  Software.  The  test 
program  was  originally  30  flights,  including  six  in  Alaska.  As  the 
program  progressed,  problems  with  the  APN-185  doppler  radar  precipitated 
additional  flights.  The  B-l  System  Program  Office  (SPO)  requested  a 
special  series  of  doppler  radar  tests  to  be  performed.  Specifically, 
four  APN-185  antennas  were  to  be  calibrated  (for  B-l  aircraft  No.  3 use) 
and  simultaneous  performance  data  was  to  be  collected  on  the  APN-185, 
APN-200  and  APN-206  doppler  radar.  This  series  was  completed  using  the 
CIGTF  CIRIS  as  the  velocity  reference.  The  B-l  SPO  decided  the  APN-200 
was  a potential  candidate  for  their  use  and  requested  a series  of  tests 
with  the  APN-200  coupled  to  the  B-l  Navigation  System.  As  a result  of 
B-l  Navigation  System/APN-200  doppler  radar  testing,  the  B-l  SPO  selected 
the  APN-200  doppler  for  the  production  B-l.  The  84  total  flights  of  the 
B-l  Navigation  System  on  the  CIGTF  testbed  aircraft  helped  solve  many 
nardware  and  software  problems,  thus  saving  the  B-l  test  aircraft  from 
many  navigation  system  problems. 

(4)  Honeywell  Laser  Inertial  Navigation  System  (LINS) 

The  Honeywell  LINS,  a ring  laser  gyro/conventional 
accelerometer  INS,  was  subjected  to  limited  developmental  flight  testing 
at  the  CIGTF  from  April  through  June  1975.  The  system  was  flown  in  the 
CONUS  and  in  Alaska.  The  system  performance  appears  to  be  in  the 
"one  mile  per  hour"  class,  and  the  purpose  of  the  test,  to  demonstrate 
the  application  of  ring  laser  gyros  to  aircraft  inertial  navigation 
systems,  was  accomplished. 

11.  CURRENT  AND  FUTURE  INS  TEST  PROGRAMS 


The  following  is  a list  of  current  and  future  CIGTF  INS  test 
programs.  These  are  separated  by  type  of  test. 

a.  Current  Programs 


(1)  Verification 

(a)  Hamilton  Standard  HSDN-1020  Strapdown  INS 

(b)  Singer-Kearfott  SKN-3000  Strapdown  INS 

(c)  Litton  LN-40  INS 

(d)  Litton  LTN-72/Ryan  APN-213  Doppler- Inertial  Navigation 
System 

(3)  Honeywell  SPN/GEANS  INS 
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(2)  Developmental 

(a)  Sperry  Radiometric  Area  Correlator  Guidance  (RACG) 

System 

(b)  E-Systems  Cruise  Missile  Guidance  System 

(c)  McDonald  Douglas  Cruise  Missile  Guidance  System 

(d)  Northrop  NIS-210-24  Attitude  and  Velocity  System 

b.  Future  Programs 

(1)  Verification 

(a)  Autonetics  N- 77  INS 

(b)  Autonetics  MICRON  INS 

(c)  Standard  Inertial  Navigation  System(s) 

(2)  Developmental 

(a)  Advanced  ICBM  Technology  (MX) 

(b)  Precision  Guided  Re-entry  Vehicle 

c.  Other  Related  Efforts 

The  CIGTF  has  been  tasked  by  Hq  USAF  to  perform  doppler 
performance  testing  for  upcoming  doppler  radar  buys/retrofits  for 
Air  Force  cargo/bomber  aircraft. 

12.  SUMMARY 


In  summary,  the  6585th  Test  Group's  Central  Inertial  Guidance  Test 
Facility  (CIGTF),  since  being  designated  as  the  DOD  focal  point  for 
testing  of  inertial  navigation  systems,  has  built  up  a wealth  of 
experience  in  guidance  system  flight  testing.  Since  aircraft  inertial 
navigation  system  flight  testing  began  at  the  CIGTF  in  1964,  40  systems 
have  undergone  verification  or  developmental  testing.  During  this 
period,  the  CIGTF  has  developed  advanced  instrumentation  systems, 
including  a precise  reference  system  (CIRIS),  adapted  a palletized 
testbed  concept,  and  established  new  test  methods  and  data  analysis 
techniques.  This  development,  with  a hard  core  of  experienced 
personnel,  has  produced  an  unequalled  capability  for  test  and 
evaluation  of  aircraft  inertial  navigation  systems. 
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APPENDIX 


REPRESENTATIVE  FLIGHT  PATHS 


I.  CARGO  CHECKPOINT  FLIGHT  PATHS 

a.  In  Phase  II  testing,  the  system  is  installed  and  flown  in  an 
NC-141A  testbed  aircraft.  Following  initial  shakedown  sorties,  data 
flights  are  performed  over  specially  designed  flight  paths  where 
accurately  surveyed  checkpoints  are  photographed  using  a vertically 
stabilized  camera  to  provide  reference  information. 

b.  The  reasons  for  including  the  transport  phase  even  for  systems 
intended  for  fighter  applications  are  as  follows: 

(1)  The  transport  usually  provides  a more  economical  vehicle 
in  which  to  checkpoint  system  performance.  This  is  especially  true  for 
systems  with  complex  software  mechanizations. 

(2)  Longer  flight  times  can  be  provided  more  economically  in 
the  transport  than  in  the  fighter.  Routes  (see  Ficure  A-l ) over  preci- 
sion surveyed  checkpoints  exist  across  the  entire  country  providing  a 
transcontinental  flight  test  capability.  Established  checkpoints 
routes  are  also  located  in  Alaska  for  high  latitude  tests. 

(3)  Present  fighter  aircraft  require  the  extensive  use  of 
range  facilities  for  radar  tracking.  Transport  aircraft  can  often  use 
off- range  vertical  photography  as  a position  reference.  This  can  be 
especially  efficient  for  the  checkout  portion  of  system  testing,  and 
is  often  accurate  enough  for  verification  testing. 

(4)  Continuous  radar  coverage  is  available  from  Holloman  AFB 
to  the  West  Coast  using  the  tracking  facilities  of  White  Sands  Missile 
Range,  Ft.  Huachuca,  AZ,  and  SAMTEC,  Vandenberg  AFB,  CA. 

II.  HELICOPTER  FLIGHT  PATHS 

Two  basic  types  of  flight  profiles  are  flown  during  this  test  phase: 
Both  North-South  and  East-West  navigation  profiles,  and  terrain  mapping 
profiles.  The  navigation  flight  profiles  will  be  flown  in  order  to 
obtain  baseline  navigation  data  in  straight  and  level  flight.  These 
flights  are  made  at  750-1000  foot  altitudes  above  ground  level.  They 
are  made  with  180°  turns  coinciding  with  a half  Schuler  period  (42 
minutes).  The  terrain  mapping  profiles  are  designed  to  simulate 
operational  conditions  as  closely  as  possible.  Specific  maneuvers 
include:  low  level  cruising,  low  level  hover,  landing  between  maneuvers, 

autogyro  descent  from  altitude,  attack  and  evasion  profiles,  and  mapping 
profiles.  The  normal  duration  of  each  mission  is  1 1/2  - 2 hours. 

Figure  A-2  is  an  outline  map  of  the  helicopter  flight  paths. 


FIGURE  A-l : CHECKPOINT  PATHS 


RATON 


LAS  VEGAS 


CARRIZOZO 


^2N  ANCHO 


ALAMOGORDO 


ARTESIA 


HOLLOMAN  AFB 


LORDSBURG 


EL  PASO 


FIGURE  A-2 

HELICOPTER  checkpoint 
flight  PATHS 


III.  FIGHTER  FLIGHT  PATHS 

Currently,  the  only  available  flight  path  for  fighter  aircraft 
is  a west-east  path  from  Holloman.  West  is  the  only  direction  with 
adequate  radar  coverage  for  the  required  42  minute  legs.  The  fighter 
aircraft  is  the  limiting  factor  for  the  duration  of  the  legs.  A CIRIS 
mounted  in  a centerline  pod  is  under  development  and  when  available, 
will  allow  fighter  flights  to  be,  in  addition  to  west,  north  and  east. 
Figure  A- 3 is  an  outline  map  of  the  current  profile. 
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DESCRIPTION  OF  THE  COMPLETELY  INTEGRATED 


REFERENCE  INSTRUMENTATION  SYSTEM  (CIRIS) 


I.  The  Completely  Integrated  Reference  Instrumentation  System  (CIRIS) 
(see  Figure  B-l ) provides  a highly  accurate  position,  velocity  and 
attitude  reference  over  long  flight  paths  for  real-time  use  in  testing 
guidance  and  navigation  systems.  The  CIRIS  is  an  airborne  automated 
system  that  is  operationally  independent  due  to  integration  of  all  the 
reference  measurement  sources  by  minicomputers.  CIRIS  advances  flight 
testing  of  navigation  systems  in  two  areas: 


a.  Highly  accurate  continuous  reference  data  is  available  for 
aircraft  testing  over  long  periods  of  time. 


b.  Real-time  data  provides  immediate  evaluation  of  systems  under 


II.  CIRIS  generates  the  reference  data  by  using  four  measurement  devices 
that  are  controlled  and  time-coordinated  by  a minicomputer  to  provide 
inputs  to  a 15-state  Kalman  filter.  The  real-time  filtered  reference 
data  which  is  generated  in  a second  minicomputer  is  distributed  to  test 
data  acquisition  computers  and  recorded  with  the  raw  measurement  data 
on  magnetic  tape.  Further  processing  (backward  filtering  and  smoothing) 
can  be  done  post-flight  as  required. 


a.  CIRIS  data  meets  the  following  specifications : 


(1)  Position  accuracy  to  13  ft  (1  sigma)  in  three-axis. 


(2)  Velocity  accuracy  to  .1  ft/sec  (1  sigma)  in  three-axis. 

(3)  Attitude  accuracy  to  3 arc  min  (1  sigma). 

(4)  Real-time  reference  points  every  10-15  seconds. 

(5)  Post-flight  reference  points  every  2-4  seconds. 


(6)  Continuous  reference  for  longer  than  84  min  in  any  direction 
(limited  only  by  transponder  availability). 


This  data  can  be  used  for  time  correlated  comparison  with  systems  under 
test  in  their  data  acquisition  computers.  Real-time  display  and  plot 
generations  of  test  and  reference  data  provide  laboratory  capabilities 
in  a flight  test  environment. 


b.  The  measurement  hardware  includes  an  inertial  navigation  system 
stabilized  by  barometric  altitude  from  an  air  data  computer,  a doppler, 
radar,  and  a precision  radio  range/range-rate  system.  The  inertial 
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COMPLETELY  INTEGRATED  REFERENCE 
INSTRUMENTATION  SYSTEM  (CIRIS) 


system  data  is  used  in  the  filter  as  continuous  reference  for  data 
propagation  and  reference  for  the  filter  error  states.  The  error 
states  are  updated  by  incorporation  of  barometric  altitude,  dopoler 
velocities,  and  precision  range  and  range-rates  to  precisely  surveyed 
ground  sites.  The  C IRIS  accuracies  are  directly  dependent  on  the 
measurements  obtained  from  the  range/ range-rate  system  which  includes 
an  airborne  interrogator  that  is  used  to  selectively  interrogate  each 
ground-base  transponder  every  two  seconds.  A set  of  the  four  trans- 
ponders nearest  the  current  aircraft  location  is  used  to  provide  one 
redundant  measurement  in  a time-phased  triangulation  scheme.  The 
transponders  and  associated  omni di recti  on  antenna  are  portable  and 
are  designed  for  remote  operation.  They  are  deployed  in  a triangular 
pattern  separated  by  approximately  150  miles  in  a line  along  the  flight 
path.  CIRIS  degradation  can  occur  when  flight  paths  leave  areas  of 
radio  range  coverage  which  extends  to  200  nautical  mile  line-of-sight. 
Incorporation  of  doppler  radar  data  will  minimize  degradation  until 
radio  coverage  is  resumed. 

III.  In  summary,  the  CIRIS  has  provided  a new  dimension  to 
navigation  system  flight  testing.  The  advances  in  reference  accuracies 
have  influenced  the  methods  of  data  analysis,  new  improved  methods 
are  being  investigated.  Real-time  data  comparison  can  shorten  test 
duration  and  the  operational  independence  has  had  a positive  affect  on 
schedules  for  testing  state-of-the-art  aided  inertial  navigation 
systems  which  require  this  precision  reference. 


230 


THE  CENTRAL  INERTIAL  GUIDANCE  TEST  FACILITY 


1 
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This  Appendix  contains  a tabulation  of  the  inertial  navigation  systems 
tested  or  currently  under  test  at  the  CIGTF. 


BRIEFING  TITLE 
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PERSHING  INERTIAL  SYSTEM  LIFE  EXTENSION  AND  ASSESSMENT  PROGRAM 


JAMES  V.  JOHNSTON 


James  V.  Johnston  is  presently  an  Aerospace  Research  Engineer  in  the 
Inertial  Systems  Development  Group  of  the  Guidance  and  Control 
Directorate  of  the  Army  Missile  Command.  Mr  Johnston  has  been  involved 
in  research  and  development  of  inertial  hardware  for  the  Army  since 
1955.  He  worked  alongside  the  original  German  Team  from  Peenemunde  on 
developing  the  Redstone  and  Jupiter  Missile  Inertial  Guidance  Equipment. 
He  holds  21  patents  on  guidance  systems  and  components.  He  has  received 
both  the  Army  Certificate  of  Achievement  and  the  Army  Engineering  and 
Scientific  Achievement  Awards. 
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PERSHING  LIFE  EXTENSION  ASSESSMENT  PROGRAM 
JAMES  V.  JOHNSTON 
GUIDANCE  & CONTROL  DIRECTORATE 
US  ARMY  MSL  RDE  LABORATORY 
US  ARMY  MISSILE  COMMAND 


The  PERSHING  missile  stockpile  has  exceeded  its  10  year  useful  service 
life.  In  a combined  effort  to  save  cost,  continue  to  assure  long  range  strike 
capability  and  provide  uninterrupted  service,  the  Army  initiated  a Life  Exten- 
sion Assessment  Program  (LEAP) . The  objective  of  this  program  was  to  determine 
any  age  related  degradation  or  wear  and  tear  on  the  inertial  system  and  to 
recommend  actions  to  extend  the  life  of  the  existing  PERSHING  stockpile. 

To  enhance  the  success  of  the  task,  the  program  was  divided  into  three 
phases : 

Phase  I was  the  planning  and  development  of  test  criteria.  Structuring 
of  rationale  for  fault  determination  of  incoming  material.  System  and  component 
non-destructive  and  diagnostic  test  plans  along  with  special  inspection  tech- 
niques. 

Phase  II  was  the  missile  G&C  section  sampling  assessment  program.  This 
phase  included  the  selection  process,  the  inspection,  test  and  hardware  assess- 
ment. Disassembly  of  parts  evaluation  and  reassembly.  Data  assessment,  prelim- 
inary report  of  findings  and  remanufacture  recommendations  program. 

Phase  III  was  the  remanufacture  phase  based  on  the  findings  of  Phase  II. 

The  recommendations  were  incorporated  with  the  end  result  of  a homogeneous 
stockpile  of  new  and  remanufactured  inertial  systems  capable  of  operational 
use  into  the  1980' s. 

The  major  problem  facing  the  assessment  program  was  the  ability  to  select 
a representative  quantity  of  inertial  systems  that  would  depict  the  true  con- 
dition of  fielded  systems.  Table  1 shows  a summary  of  the  sample  selections. 
Additionally,  the  selection  would  have  to  come  from  fielded  spares  without 
interrupting  or  jeopardizing  the  quantity  of  missiles  on  ready  status.  It 
was  further  decided  that  the  assessment  should  be  done  outside  Army  mainten- 
ance and  repair  channels  so  that  these  facilities  would  not  become  overcrowded. 
The  Navigation  and  Control  Division  of  Bendix,  the  original  manufacturer  of  the 
ST-120,  was  contracted  with  to  perform  the  test  and  assessment  program. 

After  some  deliberation,  a hardware  quantity  of  ten  ( 10 ) ST-120  platforms 
and  servo  amplifiers  was  selected  to  meet  the  minimum  operational  impact  and 
cross  section  of  the  quality  in  the  remaining  fielded  systems.  With  this  small 
a sample  size,  tight  conditions  were  placed  on  the  inertial  systems  to  be  exam- 
ined. Figure  1 shows  an  ST-120  platform  with  the  cover  removed. 
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The  platforms  for  assessment  should  he  fully  operational,  free  of  major 
or  catastrophic  defects,  in  excess  of  five  (5)  year  calendar  life  and  actual 
operating  time  in  excess  of  1000  hours.  To  preclude  any  unusual  situations 
involving  hardware  condition  as  received  or  any  failure  in  the  subsequent  tear 
down  a hardware  contingency  plan  was  set  up  for  long  lead  items.  Table  2 
depicts  the  component  size  and  compares  with  MIL  STD  for  assessment  sample. 

The  first  step  in  the  assessment  process  was  to  perform  a complete  incoming 
inspection  test  identical  to  the  original  manufacturing  test.  Complete  trace- 
ability  of  each  system  and  component  was  available.  Therefore,  starting  from 
this  point,  degradation  could  be  determined  based  on  field  operating  and  handling 
procedures . 

After  completion  of  the  system  test,  selected  subassembly  tests  on  most 
items  was  conducted.  These  tests  provided  data  on  specific  subassemblies  which 
were  subject  to  wear  and  age  degradation.  Such  assemblies  as  the  gyros,  pen- 
dulous integrating  accelerometers,  and  gimbal  gear  packages  fit  the  criteria 
of  subassemblies. 

In  order  to  establish  an  accurate  casual  relationship  between  component 
performance  degradation  and  the  age  or  wearout  susceptibility  of  the  component, 
a diagnostic  evaluation  was  performed  entailing,  where  necessary,  the  destruc- 
tion of  the  particular  component  or  assembly.  The  inertial  components  were 
disassembled  to  enable  test  of  the  pickoff,  torquer  assemblies,  inspection  and 
test  of  inner  cylinders,  spin  motor  test,  synchro  electrical  tests,  etc.  Electro- 
mechanical assemblies  such  as  motors  and  synchros  were  disassembled  to  evaluate 
the  effects  of  age  and  wear  on  brush  contacts,  lamination  stacks,  lead  anchorage, 
condition  of  insulation,  etc. 

Servo  amplifier  cards  had  their  ruggedizing  compound  removed.  The  electrical 
components  were  subjected  to  tests  to  determine  the  effect  of  age  on  the  indi- 
vidual component  parameters.  Semiconductors,  transformers,  resistors,  capaci- 
tors, and  reactors  were  tested  to  determine  any  variance  from  the  original 
drawing  requirements. 

The  detailed  assessment  tests  included  a comprehensive  visual  inspection 
of  the  sealed  ST-120  platform  which  covered: 


1.  Warped  covers  causing  improper  seal. 

2.  Connector  pin  and  insert  for  general  wear. 

3.  Bent  pins  on  connectors. 

4.  Air  fittings  for  proper  seal. 

5.  Window  of  platform  for  scratches,  cracks,  discoloration. 
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4.  Solder  joints. 

5.  Condition  of  lead  wires. 

The  identical  procedure  was  used  on  control  transformers.  Other  subcomponents 
such  as  resolvers,  caging  gearhead  and  motor,  leveling  pendulum,  and  wiring 
harness  were  inspected  to  the  same  degree  of  thoroughness.  Figure  2 shows  a 
typical  gear  package  assembly. 

The  AB-5  gyros  were  subjected  to  the  original  calibration  test.  Here  again, 
comparison  was  made  with  original  data.  Special  attention  was  given  to  wheel 
spinup  and  coast  down  time  as  well  as  power  requirements.  These  types  of  tests 
would  signify  wear  and  loss  of  lubrication  on  the  spin  bearings.  Fifteen  (15) 
of  the  thirty  (30)  units  were  selected  for  further  investigation.  These  units 
were  disassembled  down  to  the  inner  float  assembly.  The  pickoffs  and  torquers 
were  spearately  tested.  Leak  tests  were  made  on  all  float  assemblies.  Finally, 
seven  (?)  of  these  inner  cylinders  were  disassembled  and  tests  made  on  the  gyro 
spin  motor.  These  tests  included: 

1.  Preload  measurements. 

2.  Dynamic  unbalance. 

3.  Bearing  noise. 

The  gyro  spin  notor  was  then  disassembled  and  the  parts  dimensionally  and 
electrically  checked. 

The  pendulous  integrating  accelerometers  were  subjected  to  an  identical 
evaluation  as  were  the  gyros.  Additional  investigative  tests  on  the  accelero- 
meters included  scale  factors,  side  balance  and  base  alignment. 

ASSESSMENT 


At  the  completion  of  the  investigative  phase,  data  results  were  assembled 
and  reviewed.  Analyzing  and  grouping  of  the  failures  began  to  provide  patterns 
which  were  attributable  to  run  time,  aging,  and  environmental  exposure.  To 
assist  in  further  definition  of  the  failures,  all  previous  test  and  repair  data 
sheets  of  the  platform  and  servo  amplifier  were  compiled  and  analyzed.  The 
Army  utilized  the  Bendix  Corporation  for  maintenance  and  repair  when  the 
PERSHING  system  was  fielded  in  June  1963,  until  a repair  facility  was  set  up 
at  Pueblo  Army  Depot  in  Jan  67*  A summary  of  this  data  is  contained  in  Table  3* 

Rather  than  expose  the  reader  to  the  actual  volumes  of  data  obtained  at 
system,  subsystem,  and  component  level,  it  is  more  indicative  of  the  techniques 
used  to  follow  through  on  one  typical  subcomponent.  The  Pitch  Control  Transformer 
provides  a representative  component  with  mechanical  and  electrical  characteris- 
tics. Figure  3 is  a photograph  of  a Pitch  CT.  Following  the  outline  proce- 
dures, the  initial  test  was  the  visual  Inspection  of  the  10  Pitch  CT's.  The 
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6.  Screws  and  thread  wear  due  to  extensive  cover  removal. 


7.  Frame  and  surface  damage,  point  chip,  rust,  etc. 
The  visual  inspection  of  the  servo  amplifier  covered: 

1.  Physical  damage. 


2.  Dirt,  rust,  pitting,  etc. 

3.  Loose  connectors  on  cards. 

4.  General  condition  of  the  cards. 


a.  Ruggedization  condition. 

b.  Burnt  or  discolored  components. 

c.  Warped  cables. 

d.  Connector  pin  condition. 


When  the  platform  covers  were  removed,  detailed  visual  inspection  of  the  plat- 
form covered: 

1.  Prism  for  scratches  and  discoloration. 

2.  Discoloration  of  accelerometer  covers. 

3.  Physical  damage. 

4.  Harness  insulation  and  general  condition. 

5.  Caging  cone  wear  and  "0"  ring  wear. 

6.  Dirt  and  contamination. 

?.  Fabric  covering  on  air  line  hoses. 

8.  Heater  insulation  deterioration. 

The  platform  was  then  subjected  to  a detailed  system  test  to  compare  with  the 
original  test  data.  This  comparison  provided  the  tolerance  changes  from  original 
manufacture.  The  evaluation  of  this  data  was  oriented  towards  analyzing  those 
conditions  which  were  believed  to  arise  from  aging  or  wear  of  components. 


Detail  mechanical  investigation  was  conducted  on  subcomponent  parts  of  the 
platform.  Such  components  as  the  gimbal  microsyns  were  first  subjected  to  a 
thorough  visual,  electrical  and  mechanical  test.  Again,  the  data  was  compared 
with  original  manufacturer  records  to  evaluate  effects  of  age  and  wear.  Three 
(3)  of  the  twenty  (20)  microsyns  were  totally  disassembled  to  further  evaluate 
aging  effects.  Portions  of  the  molding  material  were  cut  out  for  chemical 
evaluation.  The  remaining  molding  material  was  chemically  removed  to  allow 
assessment  of  age  effects  on  the  four  coils  and  lamination  stack.  Wiring  was 
checked  for  proper  anchorage  and  insulation  degradation. 

Gear  housing  assemblies,  as  shown  in  Figure  2,  were  removed  and  totally 
checked  at  the  assembly  and  subassembly  level.  In  addition  to  performance 
determination,  each  gear,  shaft,  and  bearing  were  examined  for: 

1.  Dirt  accumulation. 

2.  Gear  profile. 

3«  Nicked  teech. 

4.  Smoothness  of  rotation. 

5.  Loose  screws. 

6.  Bearing  friction. 

The  servo  motors  were  tested  against  the  original  procurement  specifica- 
tion. In  addition  to  all  of  the  normal  performance  tests,  three  (3)  of  the 
servo  motors  were  disected  and  each  subassembly  was  subjected  to  the  following 
mechanical  checks: 

1.  Fit  between  bearing  bore  and  the  rotor  assembly  journal. 

2.  Fit  between  the  bearing  O.D.  and  the  housing  stator  assembly  bore. 

3.  Limits  of  rotor  shaft  end  play  with  a one  pound  gauging  load. 

4.  Radial  play  of  the  rotor  shaft  in  the  motor. 

5.  Rotor  shaft  runout. 

The  stator  assembly  was  checked  for: 

1.  Loose  wires. 

2.  Scraped  or  nicked  inpregnation  or  insulation  on  end  turns. 

3.  Flaking  of  varnish  or  loose  material  on  assembly. 
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assemblies  indicated  no  major  age  related  or  wearout  problems.  The  second 
test  involved  electrical  measurements  which  are  listed  in  Tables  4 and  5-  The 
electrical  data  is  also  summarized  in  the  graph  shown  in  Figure  4,  along  with 
the  original  test  data  obtained  when  the  system  was  initially  fabricated.  Upon 
completion  of  the  electrical  tests,  a series  of  mechanical  tests  and  measure- 
ments were  then  made.  These  results  are  summarized  in  Table  6.  An  individual 
piece  part  inspection  of  the  disassembled  Pitch  CT  was  then  conducted.  Visual 
inspection  disclosed  no  evidence  of  any  dirt  accumulation,  nicked  gear  teeth, 
surface  discoloration,  surface  wear  or  physical  damage  on  any  piece  part.  A 
diagnostic  evaluation  was  then  conducted  on  two  of  the  10  Pitch  CT's. 

Pitch  CT  S/N  195 

Functional  Tests  - No  deviations,  assembly  acceptable. 

Bearing  Evaluation  - Extreme  loss  of  lubricant  in  all  ball  bearings. 

Slip  Ring  Evaluation  - Examination  revealed  very  little  surface  wear 
. 53%  max. 

Visual  Inspection 

Rotor  Assembly  - Score  marks  on  shaft  caused  by  collar  clamps  (cosmetic 
defect) 

Stator  Assembly  - No  sign  of  wear. 

Pitch  CT  S/N  603 

Functional  Test  - Rotor  phase  open,  assembly  not  functional  (cause  unknown) 

Bearing  Evaluation  - Extreme  loss  of  lubricant  in  all  ball  bearings. 

( I 

Slip  Ring  Evaluation  - Examination  revealed  very  little  surface  wear 
1.2 % max. 

i 

Visual  Inspection 

Rotor  Assembly  - Magnetic  wire  near  slip  rings  show  signs  of  abrasion  - I 

one  wire  severed. 

j ■ 

Stator  Assembly  - No  apparent  signs  of  weal . 

ANALYSIS 


1.  Except  for  the  extreme  loss  of  lubricant  in  all  ball  bearings  due  to 
migration  and  evaporation  with  time  and  one  functional  failure,  no  major  wear 
and  tear,  age,  or  nonage  related  defects  were  encountered. 

G 


247 


&K22BB 33S 


mam 


I 


INSULATION  BREAKDOWN 

OK 

OK 

OK 

OK 

OK 

INSULATION  RES IS 
SPEC  = 100  MEG  MIN 

100  > 

100> 

100  > 

100> 

100> 

ROTOR  DC 
RESISTANCE  & 
BRUSH  COOTACT 

Winding 

Spec 

180-132 

72. 

126.8 

120.8 

121.? 

123.7 

119.6 

8 RFM 

Spec 
.5  Si 

.15 

.10 

.05 

.10 

.05 

166  RPM 

STATOR  DC 

RESISTANCE 

WINDINGS 


Lead  #1 
Spec 

14.4- 17.6-fl 

Lead  #2 
Spec 

14.4- 17.6  SI 

Lead  #3 
Spec 

14.4-17.6  SI 


0° 

Fundamental 
Spec  20  MV 
MAX 

9 

7 

1 

5 

4 
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Spec  40  MV 

10 

24 

4 

6 
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SUMMARY  OP  ELECTRICAL  MEASUREMENTS 
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ST- 120  PLATFORM 

154 

195 

383 

430 

503 

CALIB.  & PHASE 
ROTATION  SPEC  z £ 10  MIN 

-9 

-9 

/7 

/9 

• 

J 

ROTOR  OUTPUT  Ratio 

& Spec 

PHASE  SHIFT  2.12  - 

2.29 

2.1? 

2.24 

2.17 

2.185 

2.18 

j 

1 

, Phase 

Shift 

?.50-ll.5° 

9.6° 

10.4° 

10.0° 

9.4° 

9.5° 

STATOR  16.15  - 

IMPEDANCE  21.85 

18.0 

17.5 

20 

18 

17.5 

J65-7 

J80.3 

72.8 

79.3 

71.5 

77.8 

71.6 
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2.  The  useful  life  of  the  Pitch  CT  assemblies  can,  therefore,  be  projected 
through  1980  by  implementation  of  a remanufacture  plan  to  cover  the  problems 
found  above.  Additionally,  the  results  of  the  field  performance  and  mainten- 
ance histories  were  included  to  provide  a more  comprehensive  picture. 


(62)  Reported  rejections  at  FUAD  (l/6?  - 5/71)* 


60  CT  nulls  out  of  spec,  were  adjusted 


1 Pitch  CT  gear  defective  - replaced. 


1 Burr  on  Pitch  CT  idler  gear  - removed  burr 


( 3)  Pitch  CT  anomalies  - BDX  (I/63  - 5/7 l). 


1 CT  null  out  of  spec  - adjusted. 


1 CT  unserviceable  - replaced 


1 CT  out  of  spec  at  2 - not  verified. 


With  this  input  data  and  findings,  the  recommended  steps  to  be  applied  to  the 
Pitch  CT  of  the  ST-120  stockpile  were: 


Remove  from  platform 


Disassemble  and  clean 


- Replace  or  refurbish  all  ball  bearings  (6) 


Replace  defective  worn  brush  block  assemblies  and  rotors  as  required. 


Reassemble  and  test  to  subassembly  level 


Cost  tradeoffs: 


Replace  with  new  unit  $749*76 


- Remanufacture 


$329.36 


The  AB-5  gyros  offered  a more  interesting  and  challenging  analysis.  Thirty 
(30)  of  these  platform  components  were  examined.  Figure  5 shows  an  exploded 
view  of  an  AB-5  gyro.  Based  on  performance  results,  15  of  these  units  were 
selected  for  disassembly.  Eleven  (ll)  to  the  inner  float  assembly  and  four  (4) 
to  the  motor  level.  All  disassembled  parts  were  visually,  mechanically,  and 
electrically  inspected  where  applicable  to  determine  if  any  defects  existed  on 
air  bearing  component  geometry  or  surfaces;  also  to  determine  if  any  degradation 
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of  wiring  insulation,  wear  of  moving  parts,  changes  in  gyro  motor  torque,  cor- 
rosion, or  deterioration  of  hearing  lubricant  existed.  Table  7 is  a list  of 
the  major  parameters  that  were  out  of  specification  or  failed.  C >rrelation 
of  failures  with  causes  could  then  be  ascertained.  The  four  (4)  gyros  showing 
excess  constant  error  torque  were  subjected  to  an  air  bearing  inspection. 

The  results  of  this  inspection  revealed  two  (2)  gyros  were  contaminated  and 
one  (l)  had  air  bearing  damage.  Four  (4)  of  the  gyros  exhibiting  out  of 
spec  conditions  on  mass  unbalance  along  SA  also  indicated  the  mass  unbalance 
value  was  unstable.  Further  tear  down  and  investigation  indicated  the  unstable 
condition  was  due  to  bearing  lubrication  failures  which  affected  the  gyro 
wheel  preload. 


Electrical  testing  of  all  pickoffs  and  torquers  resulted  in  only  one  out 
of  spec  condition  of  a pickoff  trim  pot.  This  required  a simple  adjustment  not 
effecting  unit  or  platform  performance. 

The  major  defects  found  were: 

1.  Beryllium  corrosion  on  the  three  (3)  gyros  from  platform  154. 

2.  All  "0"  rings  were  rejected  for  being  compressed  and  contaminated. 


3«  All  inlet  filters  were  contaminated  which  required  cleaning  or  replace- 


ment . 


4.  Eight  (8)  AN  connectors  had  evidence  of  silver  migration  through  the 
gold  plating  and  required  cleaning  or  replacement . 

5.  Fourteen  (14)  gyros  exhibited  varying  degrees  of  silver  sulfide  con- 
tamination. 

GYRO  SUMMARY 

As  a result  of  the  testing,  inspection,  and  analysis  of  the  gyro,  it  was 
concluded  that  there  were  no  critical  problems.  The  significant  findings  re- 
sulting from  LEAP  are  as  follows: 

1.  Gryo  drfit  degradation  (major  defect). 

2.  Flex  lead  contamination  (major  defect). 

Regarding  the  gyro  drift  degradation  and  referring  to  Table  7,  there  were  six 
(6)  gyros  of  thirty  (30)  tested  that  exhibited  excessive  constant  torque.  Seven 
(?)  gyros  of  seventeen  (l?)  inspected  had  a high  degree  of  contaminates  which 
seriously  impaired  the  performance  reliability  and  have  the  potential  of  air 
bearing  failure.  This  amounts  to  41%  of  the  gyros  disassembled. 

Sixteen  (l6)  of  the  thirty  (30)  units  tested  had  excessive  mass  unbalance 
torque  along  the  SA.  Four  (4)  of  the  sixteen  (16)  also  exhibited  excessive 
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AIR  BEARING  PARTS 
SCORED  AND  CONTAMINATED 


motor  bearing  torque  on  the  Dynamics  Research  Corp  torque  tester.  One  of  these 
four  units  was  torn  down  to  the  motor.  Inspection  of  the  motor  bearings  confirmed 
the  previous  indications,  from  the  drift  and  torque  tests,  that  a lubrication 
breakdown  existed.  The  mass  unbalance  along  the  SA  is  one  of  the  most  critical 
of  the  gyro  drift  terms  since  one  of  the  possible  causes  is  the  aforementioned 
gyro  motor  bearing  lubrication  failure. 

The  graph  of  Figure  6 shows  that  the  average  mass  unbalance  term  increases 
with  usage.  If  the  specification  limit  of  .2  /hr  is  doubled  and  the  result- 
ing .4  /hr  is  taken  as  the  point  where  this  parameter  requires  attention,  then 
Figure  6 indicates  this  occurs  after  1000  hours  of  run  time.  Based  on  the 
average  run  time  of  770  hours  over  an  average  unit  age  of  6.8  years  for  the 
assessment  units,  this  results  in  a remaining  useful  life  of  slightly  over  two 
years  for  the  thirty  (30 ) samples. 

Statistically,  five  inner  cylinder  assemblies  of  fifteen  tested,  83%  would 
require  replacement  to  meet  LEAP  objectives.  On  the  basis  of  the  limited  LEAP 
sampling,  it  is  concluded  that  this  33$  is  representative  of  gyro  motor  degra- 
dation in  the  field  population. 

Regarding  the  flex  lead  contamination  shown  in  Figure  7i  fourteen  (l4)  of 
seventeen  (17)  LEAP  gyros  were  found  to  have  sulfide  contaminants  which  defin- 
itely can  lead  to  gyro  and  mission  failure.  Because  the  purity  of  the  air 
supply  is  highly  suspect  and  unknown  at  this  time,  it  can  only  be  concluded 
that  any  gyro  in  the  field  for  five  years  has  a 75$  chance  of  being  contam- 
inated. 

In  all  other  areas,  where  an  age  or  usage  trend  is  not  indicated,  the 
statistical  results  of  the  LEAP  sampling  are  considered  representative  of  the 
field  population.  The  result  of  the  above  findings  lead  to  the  recommendation 
of  a plan  to  be  applied  to  all  gyros  in  the  ST-120  stockpile. 

Remove  from  platform  and  perform  drift  test  and  motor  run-up. 

- Disassemble  to  the  air  bearing  inner  cylinder. 

Perform  DRC  test. 

- Replace  defective  pickoffs  and  torquers. 

- Replace  all  flex  leads  with  new  material. 

Relap  and  reassemble  inner  cylinders  that  pass  the  DRC  test. 

- Complete  tests  to  original  manufacture  level. 

Typical  tests  with  the  DRC  method  of  measuring  gyro  spin  motor  torque  is  shown 
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in  Figures  8,  9,  and  10. 


Although  this  paper  only  discusses  two  subcomponents  of  the  GT-120  platform, 
each  component  was  individually  examined,  tested,  and  analyzed  in  a similar 
manner.  The  summary  results  of  the  mechanical  assemblies  were: 

1.  Hardware  showing  affects  of  age/usage. 

Caging  mechanism  rollers  deteriorated  as  shown  in  Figure  11. 

Loss  of  bearing  lubricant. 

- Gasket  material  degradation. 

Caging  micrcswitch  actuation  degradation. 

Minor  evidence  of  handling/service  damage. 

No  serious  evidence  of  gear  wear  and  alignment  surface  degradation. 

2.  Hardware  showing  effects  of  environmental  exposure. 

Yaw  and  pitch  gimbal  bearing  corrosion. 

- Main  shaft  corrosion  as  shown  in  Figures  12  and  13 . 

Prism  mounting  base  corrosion. 

- Flex  lead  silver  migration. 

The  servo  amplifier  was  evaluated  in  much  the  same  manner  as  the  platform. 
Figure  14  is  a photograph  of  a servo  amplifier.  The  first  test  consisted  of 
a functional  electrical  test  with  its  associated  platform  in  order  to  estab- 
lish a comparison  with  initial  "as  shipped  data".  The  functional  test  was 
followed  by  a thorough  visual  inspection  which  covered: 

Physical  damage. 

- Loose  connectors. 

- Ruggedization  condition. 

- Burnt  or  discolored  components. 

- Warped  cards. 

Connector  pin  condition. 

- Harness  insulation  condition. 
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All  amplifier  cards,  relay  control  assembly,  and  transformer  power  assemblies 
were  removed  and  each  subsystem  was  tested  against  original  manufacturing  pro- 
cedures. Further  disassembly  of  selected  cards  was  conducted  where  all  resis- 
tors, capacitors,  diodes,  transistors,  and  pots  were  removed  without  damaging 
the  components.  All  of  these  components  were  then  inspected  for  cracked  cases, 
dielectric  leakage  on  capacitors,  and  nicked  leads.  The  components  were  then 
tested  for  meeting  their  electrical  parameters,  as  specified  in  the  original 
incoming  inspection  at  time  of  fabrication. 

Tantalum  capacitors  with  marginal  performance  were  X-rayed,  and  then  dis 
sected.  The  electro  plated  copper  was  examined  to  locate  the  weakness  in 
the  dielectric.  Semiconductors  with  reduced  performance  were  also  X-rayed. 

A seal  leak  test  was  performed  and  then  the  units  were  dissected.  Internal 
visual  inspection  covered  contamination  and  workmanship. 

The  sealed  relays  were  removed  from  their  cards  and  examined  on  an  indi- 
vidual basis.  A seal  leak  test  was  performed  along  with  a complete  electri- 
cal test.  Selected  relays  were  then  dissected  to  evaluate  their  internal  con- 
dition. The  internal  inspection  covered  spring  tension,  contact  adjustment, 
contact  condition,  surface  contamination,  discoloration,  and  insulation  condi- 
tion around  the  coil. 

Some  very  interesting  results  were  obtained  from  this  investigation.  The 
significant  results  were: 

LEAP  sample  hardware  showing  effects  of  age/usagei 

1.  Cracked  components  on  Hysol  Ruggedized  electronic  cards  as  shown 
in  Figure  15. 

2.  Cracked  solder  connections  on  electronic  cards  with  Bifurcated  ter- 
minal configuration. 

3.  Minor  evidence  of  handling/service  damage. 

4.  Transistors  showed  no  evidence  of  internal  physical  or  electrical 
deterioration. 

5.  Cover  gasket  material  degradation. 

6.  Capacitor  metallic  flaking  as  shown  in  Figure  16. 

LEAF  sample  hardware  showing  effects  of  environmental  exposure: 

1.  Wire  cable  tubing  insulation  discolored. 

2.  No  serious  evidence  of  foreign  or  self-generated  contamination. 
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Some  corrosion  on  the  AN  connector  pins,  see  Figure  17,  was  caused  by  the 
silver  plating  migrating  through  the  porous  gold  plate  finish  and  eventually 
combining  with  gaseous  sulfur  in  the  atmosphere  to  generate  silver  sulfide. 
Also,  the  silver  in  contact  with  an  insulating  surface,  in  a humid  environment 
and  with  an  applied  electrical  potential,  will  move  ionically  from  its  initial 
location  and  redeposit  in  another  location. 

Servo  Amplifier  results: 

From  the  analysis  it  was  determined  that  the  life  of  the  servo  amplifier 
could  be  extended  through  the  1980  time  frame  with  minor  remanufacturing  of 
specific  items.  A correlation  was  found  to  exist  between  the  number  of 
failures  and  the  operating  time.  This  is  graphically  shown  in  Figure  18.  The 
failures  were  mostly  of  a minor  nature,  consisting  of  gain  changes.  It  was 
determined  that  the  mechanical  assemblies  such  as  the  amplifier  case,  trans- 
former assembly,  and  relay  assembly  along  with  the  wiring  harness  needed  only 
a close  visual  inspection.  During  the  Phase  III  remanufacture,  it  was  deter- 
mined that  six  (6)  diodes  should  be  replaced  with  a newer  type  and  the  diode 
body  should  be  placed  in  PVC  sleeving.  The  sleeving  was  determined  as  neces- 
sary to  stop  the  cracking  of  resistors  and  diodes.  The  unequal  temperature 
expansion  between  the  Hysol  ruggedizing  and  the  component  body  caused  the  high 
stresses  resulting  in  cracked  components  and  the  cracked  solder  connections 
of  the  Bifurcated  terminals.  Utilizing  a less  rigid  ruggedizing  material 
solved  both  problems. 

CONCLUSIONS 


The  results  of  the  assessment  program  provided  specific  inputs  for  the 
Phase  III  remanufacture  of  the  ST- 120  stockpile.  Accurate  prediction  of 
replacement  component  quantities,  anticipated  problems  that  would  be  encount- 
ered, and  precise  cost  determination  were  only  a few  of  the  many  conclusions 
obtained  from  the  assessment  program.  Specific  design  changes  and  their  func- 
tional significance  were: 

1.  The  rubber  jacked  aging  rollers  were  changed  to  all  metal  design  to 
eliminate  fraying  causing  potential  operational  failures  in  the  caging  mech- 
anism. 


2.  Microswitches  used  in  the  platform  caging  were  redesigned  by  the 
vendor  to  eliminate  internal  debris.  This  debris  caused  high  contact  resis- 
tance resulting  in  faulty  operation  and/or  defective  readout. 

3.  The  protective  finish  of  black  oxide  and  silicon  grease  coating  was 
replaced  by  electroless  nickel  plating  to  eliminate  corrosion  (rust)  on  plat- 
form gimbals  and  main  shaft.  The  rust  was  free  to  migrate  to,  and  effect 
functional  operation  of,  open  gearing  and  bearings. 

4.  Gyro  and  accelerometer  flex  lead  material  was  changed  from  85$  silver, 
15%  copper  alloy  to  "BJ"  gold,  (11.99$  gold  / 100  PPM  beryllium)  to  eliminate 
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corrosion  problems  revealed  during  LEAP.  Corrosion  of  silver-copper  flex 
leads  was  due  to  reaction  of  the  sulfur  in  the  atmosphere  and  silver  forming 
silver- sulfide  in  a form  of  whisker  growth.  In  addition,  the  formation  of 
copper  oxide  increased  the  resistance  of  the  flex  lead  ribbon  accelerating 
the  sulfur/silver  reaction.  Contamination  caused  by  migration  of  the  loosely 
adhered  particles  could  enter  air  bearing  gaps  resulting  in  gyro  or  accelero- 
meter failure. 

5.  Miniature  diodes  (in  hermetically  sealed  glass  jacket)  used  on  all 
servo  amplifier  cards  and  chassis  terminal  beards  was  changed  to  new  configura- 
tion utilizing  a new  type  diode  covered  with  a protective  plastic  sleeve.  The 
sleeve  eliminated  damage  to  the  glass  envelope  caused  by  thermal  stresses  from 
the  ruggedizing  compound. 

6.  The  type  RC08  (MIL-R-11)  sealed  ceramic  jacketed  resistor  was  changed 
to  a new  resistor,  type  RCR05  (MI L-R- 39008 ) . The  RC08  type  resistor  was  re- 
placed to  eliminate  damage  to  the  ceramic  jacket  and  failure  of  resistor  element 
due  to  thermal  stresses  from  the  ruggedizing  compound. 

The  Phase  III  remanufacture  program  was  started  in  August  1972  and 
completed  in  March  1975*  All  ST- 120  platforms  in  the  PERSHING  stockpile  were 
cycled  through  the  remanufacture  process  without  jeopardizing  the  system's 
full  strike  capability.  This  highly  successful  remanufacture  program  was 
due  to  the  accuracy  and  thoroughness  of  the  analysis  from  the  assessment 
phase. 
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SECTION  1 


JfTHT 


SUMMARY 


As  part  of  the  Inertial  Systems  Logistics  Improvement 
Study,  CSDL  reviewed  the  and  tests  performed  on  the 
G-200  gyro.  The  value  of  T^,  or  flotation  temperature,  is 
normally  extracted  using  the  automatic-flotation-temperature 
test.  This  approach  uses  an  internal  indication  of  float*- 
to-case  position  to  actively  control  the  gyro  temperature  at 
the  flotation  point.  However,  because  of  acceptable  build 
variations,  the  errors  in  the  value  of  T^  extracted  can  be 
as  large  as  3°F.  An  alternative  approach  to  this  test  was 
developed  in  which  a temperature-ramp  generator  smoothly 
ramps  the  gyro  temperature  while  the  f loat-to-case  position 
indication  is  recorded  directly  on  the  test  station's  recorder. 
This  approach  was  shown  to  be  accurate,  and  repeatable  to 
0.2°F.  The  use  of  the  temperature-ramp  generator  was  extended 
to  include  the  Ch  or  center-of-buoyancy  vest.  Traditionally, 
this  test  is  performed  by  torque  variations,  and  extracting 
a value  in  °/h/°F.  By  extracting  the  value  of  C,  from  a 
continuation  of  the  T ^ test,  the  combined  test  time  is 
reduced,  while  improved  accuracies  are  achieved. 


"Float"  or  Inner  Gimbal — the  wheel-supporting  torque-summing 
member . 
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After  confirming  the  applicability  of  the  temperature- 
ramp  generator,  a set  of  hardware,  which  could  be  used  in  the 
production  test  area  at  AGMC , was  developed.  This  included 
portable  temperature-ramp  generator  circuits,  and  an  inter- 
face box  at  each  station.  The  interface  box  included  the 
necessary  switching  circuits,  signal-conditioning  circuits, 
and  as  a special  bonus,  a wheel-power  monitor  to  be  used  in 
support  of  other  tests  on  the  G-200.  In  all,  the  temperature- 
ramp  generator  and  the  interface  box  should  significantly 
improve  the  capability  of  the  G-200  test  station. 


281 


T^»*> 


■ Mr  ^ • 

j*?._  • i mmIMIHMbII 


AD-A031  049 


UNCLASSIFIED 

4 0F  7 

*D  • 
A03I049 


AEROSPACE  GUIDANCE  AND  METROLOGY  CENTER  NEWARK  AIR  FO— ETC  F/G  17/7 
DATA  EXCHANGE  FOR  INERTIAL  SYSTEMS  <9TH>»  CONFERENCE  PROCEEDING— ETC(U) 
SEP  76  E T BODEM 

AGMC-XRX-76-5  . NL 


r 


I t 


SECTION  2 


INTRODUCTION 


For  some  time,  The  Charles  Stark  Draper  Laboratory  h 
been  involved  in  the  Maintainability  and  Reliability  Impro 
ment  program  at  AGMC.  A portion  of  this  effort  is  directe 
at  achieving  cost-effective  improvements  in  the  testing  of 
G-200  gyros.  In  this  area  the  goals  are: 

(1)  To  review  test  techniques — investigating  the 
validity  of  the  tests  and  the  accuracy  or  unce 
tainty  of  the  results. 

(2)  To  improve  the  inherent  diagnostic  capability  < 
the  acceptance  tests  performed. 

(3)  To  develop  an  optimum  test  sequence. 

Towards  these  goals,  several  tasks  are  being  addressed.  I: 

particular,  the  investigation  of  preferred  gyro  orientatio: 

for  drift  and  other  tests  provide  the  ability  to  separate 

error  mechanisms  in  the  results  recorded.  An  active  filte 

has  been  delivered  and  is  being  evaluated,  which  permits 

the  separation  of  torque-signal  anomalies  from  acceptable 

higher-frequency  gyro  noise.  Tighter  wheel-bearing  specif 
(2) 

cations  have  been  recommended  which  should  sxgnif lcantl; 
reduce  the  number  of  gyros  requiring  rebuild  because  of  ba< 


Superscript  numerals  refer  to  similarly  numbered  referem 
in  the  List  of  References. 
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bearings.  In  the  area  of  improved  test  accuracies,  our 

energies  have  been  directed  towards  the  flotation-temperature 

determination  test  (Tf)  and  the  center-of-buoyancy  test 
(3)  1 

(C^) . It  is  essential  that  the  results  from  these  tests 

be  accurate,  since  the  numbers  gathered  affect  the  weight- 
shave  or  balance-adjusting  operation  on  the  gyro.  The  weight 
shave  operation,  in  itself  expensive,  becomes  all  the  more 
expensive  if  repeated  weight-shaves/test  cycle  are  required 
to  converge  on  an  acceptable  final  result. 

The  sections  that  follow  describe  these  two  tests 
(see  Section  3) , some  of  the  mechanisms  which  cause  errors 
in  their  results,  and  finally  an  alternate  test  approach 
developed  at  CSDL  (see  Section  4) . 
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SECTION  3 


DETAILS  OF  THE  T.  AND  C,  TESTS 
f b 


The  Tf  and  tests  are  performed  as  separate  tests  in 
the  acceptance-test  sequence  at  AGMC . These  two  tests  are 
described  in  Section  3.1  and  3.2. 

3 . 1 The  Tg  Test 

The  Tj  test  is  performed  to  determine  the  temperature 
at  which  the  gyro  float  achieves  neutral  flotation.  In  the 
system,  and  during  acceptance  tests,  the  gyro  is  operated  at 
Tf  - 3°F.  In  the  original  definition  of  the  T^  test,  a con- 
ceptually valid  approach  was  applied.  This  approach  is  to 
actively  control  the  gyro  temperature  using  an  internal  indi- 
cation of  f loat-to-case  position.  Once  in  a stable  mode  of 
operation,  one  has  but  to  read  the  temperature  at  which  the 
servo  settles,  and  this  temperature  is  T^ . Figure  3-1  shows 
the  data  recorded  in  a typical  T^  test.  These  data  show  how, 
because  of  low  float  damping  and  long  thermal  time  constants, 
the  temperature  oscillates  about  a settled  point.  In  defi- 
ning the  Tf  temperature  point,  the  test  operator  extracts  the 
average  of  this  oscillation.  Of  itself,  this  approach  is 
valid;  however,  as  a result  of  taking  a closer  look  at  the 
f loat-to-case  position-sensing  mechanisms,  it  was  found  that 
errors  as  large  as  3°F  could  be  introduced. 


ENTER 

AUTOMATIC- 

FLOTATION 


The  transducer  used  to  indicate  f loat-to-case  position 
is  the  Inner-Gimbal-Pickof f CenterTap  (IGPOCT)  voltage.  It 
is  important  to  form  a good  understanding  of  how  the  POCT 
and  the  gyro  float  behave  at  temperatures  near  the  flotation 
temperature.  Figure  3-2  is  a schematic  representation  of 
three  inner-gimbal  (IG)  float  positions  relative  to  the  two 
IG  pivots.  The  vertical  free  play  (radial  play)  of  the  piv- 
ots is  greatly  exaggerated  for  clarity.  The  graduated  scale 
in  the  center  of  the  float  is  fixed  to  the  case  and  repre- 
sents the  output  of  the  IGPOCT  relative  to  vertical-float 
position.  Note  that  the  mechanical  center  of  float  play 
between  the  pivots  does  not  necessarily  correspond  to  the 
electrical  null  of  the  POCT.  The  null  position  varies  from 
unit  to  unit,  dependent  mostly  on  outer-gimbal  pivot  to  jewel 
end  play,  and  therefore  is  shown  arbitrarily  at  two  divisions 
above  center. 


The  center  of  buoyancy,  C^,  and  the  center  of  mass,  C , 
are  also  subject  to  some  unit-to-unit  variations  and  are  sim- 
ilarly assigned  arbitrary  positions  on  the  float  as  shown  in 
Figure  3-2.  At  temperatures  well  below  T^,  the  float  has 
positive  buoyancy  (see  Figure  3-2  (a) ) , and  the  forces  acting 
on  the  float  have  a net  upward  resultant.  As  the  temperature 
is  increased,  the  buoyant  force  is  reduced  and  the  weight  of 
the  float  begins  to  rotate  towards  the  position  shown  in 
Figure  3-2  (b).  If  we  define  this  as  temperature  T ^ we 
find  that  this  may  be  equal  to,  or  less  than  the  flotation 
temperature.  As  the  temperature  is  further  increased,  the 
float  moves  to  the  position  shown  in  Figure  3-2  (c) . If  we 
define  this  as  temperature  T^c*  this  temperature  will  be 
equal  to,  or  greater  than  . Therefore,  T^  is  located  some- 
where between  T , and  T,  . 

ab  be 

Appendix  A includes  the  necessary  analysis  which  indi- 
cates that  if  the  float  is  well  balanced,  then  T^  lies  half- 
way between  Tafa  and  Tbc . A theoretical  plot  (based  on  the 
foregoing  comments)  of  POCT  output  versus  temperature  is 
shown  in  Figure  3-3.  Actual  plots  of  POCT  output  versus 
temperature  were  recorded  on  several  gyros  as  their  temper- 
ature was  slowly  and  uniformly  increased.  These  plots,  shown 
in  Figure  3-4,  indicate  varying  characteristics.  Although 
the  amount  of  time  in  which  the  float  is  in  the  position 
shown  in  Figure  3-2  (b)  varies,  more  significant  is  the  spread 
in  pickof f-centertap  output-voltage  levels,  which  can  be 
seen  in  the  various  instruments.  Between  the  instruments  in 
Figure  3-4  for  example,  this  spread  is  8 millivolts.  The 
question  which  becomes  obvious  in  regard  to  the  automatic- 
flotation-temperature  test  is:  Over  what  section  or  sections 

of  the  curves  of  Figures  3-4  (a),  (b) , and  (c)  , does  the  float 

oscillate  when  in  the  automatic-flotation-test  mode? 
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Figure  3-3.  IGPOCT  versus  temperature  (theoretical). 

A block  diagram  of  a theoretical  representation  of  the 
major  characteristics  of  the  flotation  loop  is  shown  in 
Figure  3-5.  Ideally,  the  loop  is  intended  to  keep  the  float 
oscillating  about  that  position  which  results  in  zero  pickoff- 
centertap  voltage.  However,  because  there  are  several  exter- 
nal thermal  inputs,  the  pickoff  centerpoint  has  been  offset 
in  the  standard  test-station  circuitry  to  produce  enough 
error  voltage  to  offset  these  errors.  These  errors  are  the 
sum  total  of  steady-state  thermal  inputs  and  thermal  sinks. 

The  theoretical  curve  which  characterizes  the  steady- 
state  open-loop  pickoff  to  gyro-temperature  transfer  is 
shown  in  Figure  3-6.  This  curve  shows  gyro  temperature  as 
a function  of  the  input  voltage  to  the  temperature-control 
circuitry.  The  area  in  which  the  flotation  loop  will  operate 
is  determined  by  the  intersection  of  this  curve  and  the 
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TEMPERATURE  ABOVE  TQ  (°F) 


TEMPERATURE  ABOVE  TQ  (°F) 


Figure  3-4. 


Actual  plots  of  POCT  versus  temperature 
with  increases  in  temperature. 


Figure  3-5.  Block  diagram  of  the  flotation  loop. 


float-position  curve,  as  shown  in  Figure  3-7.  For  each  of 
the  three  gyros  shown  in  Figure  3-4,  this  intersection  in 
the  measured  flotation  temperature  occurred  at  or  near  tem- 
perature Tbc>  In  the  course  of  normal  testing,  however, 
because  both  curves  are  variable  functions  of  the  gyro  and 
the  test  station,  and  because  the  POCT  is  not  normally 
recorded,  it  is  not  possible  to  tell  from  the  flotation- 
test  results  themselves  over  which  section  of  the  float- 
position  curve  oscillations  are  occurring. 
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Figure  3-6.  Demodulator  input  versus  gyro-temperature 
open-loop  transfer  curve. 
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Figure  3-7.  Float-position  curve. 
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The  variations  in  the  float-position  curve  between 
gyros  is  a function  of  many  variables.  These  variables 
include  the  vertical  pivot-to- jewel  end  play,  as  well  as  the 
bias  level  at  which  the  gyro  torque-to-balance  loop  is  oper- 
ating. In  tests  conducted  to  investigate  the  latter,  a 
sensitivity  of  0.4°F  per  millivolt  was  determined.  This  is 
particularly  significant  in  that  one  of  the  procedures  for 
forcing  the  temperature  loop  to  oscillate  is  to  adjust  the 
servo-loop  bias. 

3.2  The  C.  Test 
b 

The  test,  as  performed  on  G-200  gyros,  determines 
the  instruments'  unbalance  sensitivity  to  temperature  (°/h/°F) 
or,  in  essence,  the  misalignment  between  center  of  buoyancy 
and  center  of  mass.  The  test  is  performed  by  incremently 
introducing  changes  in  the  gyro-operating  temperature  and 
observing  the  resulting  changes  in  the  torque  recorded. 

After  each  change  a reasonable  amount  of  time  is  allotted 
for  the  instrument  to  settle  thermally.  A typical  trace 
gathered  during  one  of  these  tests  is  shown  in  Figure  3-8. 
Extremely  accurate  results  are  required  from  this  test,  since 
the  specification  on  the  extracted  value  of  is  0.01°F/h/°F. 
Of  itself,  the  test  is  straightforward;  however,  there 
were  several  shortcomings  which  our  new  technique  wishes  to 
address.  Namely, 

(1)  The  test  is  extremely  sensitive  to  variations 

in  gyro  torque  which  would  otherwise  be  accept- 
able. That  is,  if  during  a temperature  change 
the  torque  experienced  a change  other  than  that 
due  to  temperature,  the  composite  torque  changes 
would  nonetheless  be  used  in  the  calculation  of 


the  value  of  C^.  These  torque  changes  are 
relatively  common,  since  the  temperature  change 
is  a step-change,  and  therefore  introduces 
sizeable  transients  into  the  gyro-torque  signal. 


The  test  is  time  consuming  because  five  gyro- 
temperature  changes  require  10  minutes  to  settle 
followed  by  a 15-minute  torque  recording  at  each 


new  setting. 


J 


SECTION  4 


AN  ALTERNATE  APPROACH  USING  THE  TEMPERATURE-RAMP  GENERATOR 


An  alternate  approach  to  the  Tf  and  C^  tests  was  sug- 
gested during  the  investigation  into  the  T^  tests.  At  that 
time,  a temperature  ramp  was  used  in  the  characterization  of 
the  float-position  signal.  The  float-position  signal  itself 
gave  a good  indication  of  when  the  instrument  went  through 
flotation,  as  the  temperature  ramp  provided  a smooth  transi- 
tion through  the  range  of  interest.  The  temperature  ramp 
became  the  basis  for  the  alternate  approach.  This  approach 
would  be  relatively  independent  of  variations  in  the  pickoff- 
centertap  zero-point  location  and  the  other  subtleties  which 
were  deteriorating  the  quality  of  the  standard  T^  automatic- 
temperature  test.  In  addition,  because  the  Cb  test  also 
required  variations  in  temperature,  perhaps  the  same  temper- 
ature ramp  might  also  be  used  in  a modified  C^  test. 

A temperature-ramp  generator  was  designed  and  con- 
structed. The  prototype  design  shown  in  Figure  4-1  was 
devised  to  gather  the  necessary  engineering  evaluation  data. 
It  has  the  ability  to  ramp  the  gyro  temperature  between  two 
selectable  temperatures  at  rates  from  0.1°  to  0.8°F  per 
minute.  It  introduces  a ramping  voltage  signal  into  the 
temperature-control  circuit  at  a second-stage  amplifier  so 
that  the  temperature-bridge  error  signal  can  still  be  moni- 
tored unaltered.  That  is,  so  that  the  temperature  monitored 
on  the  recorder  is  still  an  indication  of  the  instrument, 
temperature . 
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Figure  4-1.  The  temperature-ramp  generator. 

The  questions  addressed  in  engineering  evaluation  tests 
at  CSDL  were:  First,  whether  the  data  gathered  was  valid, 

and  second,  at  what  speed  should  the  temperature  be  ramped 
to  permit  the  gyro  to  follow  the  temperature  change  without 
any  significant  lag.  For  the  T^  test,  data  were  gathered 
monitoring  the  pickof f-centertap  signal  as  the  temperature 
was  ramped  first  from  low  to  high  and  later  from  high  to 
low.  By  comparing  the  behavior  of  the  POCT  during  these 
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tests,  it  was  possible  to  determine  at  what  rate  the  gyro 
temperature  could  be  ramped  without  exhibiting  any  significant 
hysteresis,  or  lag.  Table  4-1  summarizes  the  spreads  in  Tf 
extracted  at  various  rates  as  the  gyro  was  ramped  in  these 
two  directions.  It  was  found  that  the  0.1°F/min.  ramp  was 
more  than  adequate  in  assuring  that  the  pickof f-centertap 
signal  was  indeed  reflecting  the  temperature  recorded.  The 
repeatability  of  the  value  of  T^  extracted  indicated  uncer- 
tainties in  the  0.1°  to  0.2°F  region.  A typical  trace  of 
the  Tf  test  performed  with  the  temperature-ramp  generator  is 
shown  in  Figure  4-2. 


Table  4-1.  Flotation  temperature  differences  observed 


at  different  ramp 

rates . 

Ramp  Rate 

ATf* 

(°F/min. ) 

( °F  / 

0.1 

<0.2 

0.2 

0.5 

0.4 

1.2 

* (Tj  negative  ramp  - T^ 

positive  ramp) 

The  test,  performed  using 

the  temperature-ramp 

generator,  was  investigated  next. 

Typical  results  are  shown 

in  Figure  4-3.  These  results  were 

gratifying,  particularly 

when  torque  disturbances  were  noted  which  could  have  other- 
wise corrupted  the  value  extracted  in  a test  performed 
in  the  traditional  way.  The  test  was  performed  on  several 
gyros  applying  both  the  old  and  the  new  techniques.  These 
results  also  compared  favorably.  With  the  engineering 
evaluation  completed,  the  next  task  was  to  define  a set  of 
hardware  which  could  be  introduced  into  the  acceptance-test 
station . 
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Figure  4-2.  Typical  trace  of  the  Tf  test  performed 
using  the  temperature-ramp  generator. 


Figure  4-3.  Typical  trace  of  C,  test  performed 
the  temperature-ramp  generator. 


TORQUE 
0.02  °/h 
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SECTION  5 
HARDWARE 


The  engineering  evaluation  of  the  temperature-ramp 
generator  was  performed  with  only  temporary  modifications  to 
existing  gyro  test  hardware.  With  its  viability  confirmed, 
hardware  was  now  required  which  could  be  introduced  on  each 
test  station  and  which  would  be  both  reliable,  easy  to  in- 
stall, and  relatively  inexpensive. 

There  are  approximately  20  test  stations  in  the  AGMC 
G-200  test  area.  It  was  agreed  that  no  more  than  six  test 
stations  would  be  using  a temperature-ramp  generator  at  any 
one  time.  For  this  reason,  the  temperature-ramp  generator 
was  developed  as  a portable  unit  which  could  be  brought  from 
station  to  station.  An  interface  box  would  then  be  required 
at  each  station  which  would  perform  the  necessary  switching 
functions  and  bring  the  required  signals  in  and  out  of  the 
temperature-ramp  generator.  To  appreciate  the  scope  of  this 
interface  box,  let  us  review  the  gyro-balance  test  station 
as  it  exists  in  the  acceptance-test  area.  The  test  station 
includes  a Servo-Riter  recorder  with  four  pens;  one  for  each 
of  the  two  torque  traces  (IG  and  OG) , one  which  records  gyro 
temperature  (T^),  and  a fourth  which  is  time  shared  between 
base  and  ambient  temperature  (T^ ) . It  would  be  necessary  to 
take  this  last  pen  and  provide  the  ability  to  switch  in  place 
of  the  temperature  signals,  the  pickof f-centertap  voltage 
signal.  As  configured,  the  Servo-Riter  recorder  also  included 
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a temperature  safety,  which  would  shut  the  system  down  when 
the  ambient  temperature  reached  10°F  above  operating.  If  the 
pen  were  to  be  used  for  a different  function,  this  interlock 
would  have  to  be  mechanized  within  the  interface  box. 

The  pickof f-centertap  signal,  as  recorded  in  the  evalu- 
ation tests,  was  generated  using  a phase-sensitive  voltmeter 
in  the  test  station.  In  order  to  keep  from  continuously  tying 
up  this  piece  of  equipment,  during  the  Tf  and  tests,  the 
interface  box  would  also  include  a simple  demod  circuit.  The 
circuits  described,  the  temperature-interlock  circuit,  a 
demod  circuit,  and  the  necessary  switching  functions,  were 
all  packaged  into  a small  box  which  fit  neatly  into  the  Sarvo- 
Riter  recorder.  This  package  is  shown  in  Figure  5-1. 

An  improved  diagnostic  capability,  as  part  of  the  normal 
acceptance  test  sequence,  has  been  a goal  of  the  CSDL  effort 
at  AGMC  for  some  time.  Since  the  interface  box  would  have  to 
be  introduced  on  each  test  station,  here  was  an  opportunity 
to  provide,  with  little  additional  cost,  some  additional 
hardware  which  would  improve  the  diagnostic  capability  sig- 
nificantly. Since  this  was  an  engineering  evaluation  proto- 
type version  of  a final  interface  box,  we  took  the  liberty 
of  adding  some  circuitry  which  we  felt  to  be  valuable  in  the 
diagnostic  area. 

Pickof f-centertap  signals  recorded  during  bias- 
repeatability  tests  have  been  shown  to  be  valuable  in  the 
diagnosing  of  pivot-to- jewel  problems  such  as  dirt  and  broken 
pivots.  Because  of  this,  the  capability  of  recording  either 
inner-gimbal  POCT  or  outer-gimbal  POCT  on  the  Servo-Riter 
recorder  was  provided.  Secondly,  AGMC  has,  for  some  time, 
shown  the  value  of  correlating  milliwattmeter  traces  to 
torque  traces  in  the  diagnosing  of  wheel-bearing  problems. 
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For  the  most  part,  this  milliwattmeter  trace  need  only  be  of 
a qualitative  nature,  indicating  transients  in  power  con- 
current with  transients  in  torque.  The  present  approach  used 
at  AGMC  is  to  have  two  commercial  milliwattmeters  in  the  test 
laboratory  that  can  be  rolled  around  to  various  test  stations 
as  required  to  provide  the  necessary  diagnostic  aid.  While 
it  would  be  worthwhile  to  introduce  a milliwattmeter  in  each 
test  station,  the  cost  of  commercially  available  units,  with 
accuracies  far  beyond  the  needs,  would  be  prohibitive.  For 
this  reason,  a wheel-power  monitor  consisting  of  a simple 
i cos  0 demod  was  designed  and  also  included  in  the  interface- 
test  box.  The  sensitivity  and  bandwidth  of  the  wheel-power 
monitor,  was  matched  to  that  of  the  milliwattmeter  currently 
in  use.  Figure  5-2  shows  a typical  trace  of  the  wheel-power 
monitor  as  compared  to  the  milliwattmeter  output. 

While  initially  the  interface  box  was  required  to 
simply  interface  the  temperature-ramp  generator  to  the  gyro- 
balance  test  station,  by  including  some  relatively  simple 
circuitry,  its  usefulness  was  expanded  considerably.  The 
cost  of  the  entire  modification,  temperature-ramp  generator, 
and  interface  box,  comes  to  less  than  $1,000  per  test  sta- 
tion. This  cost  is  relatively  inexpensive  when  considered 
in  the  context  of  AGMC  repair  costs,  where  the  typical 
recycle  of  a G-200  gyro  can  be  expected  to  run  in  the  $2,000 
region.  Obviously,  by  improving  diagnostics  and  converging 
on  a solution  as  quickly  as  possible,  repair  costs  wasted 
on  unnecessary  repair  cycles  can  be  considerably  reduced. 
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Figure  5-2.  Comparison  of  traces  using  a commercial 

milliwattmeter  and  the  wheel-power  monitor 


APPENDIX  A* 


BALANCE  AND  FLOTATION  ECCENTRICITY  ERROR  TORQUES 


In  Figure  A-l,  Fg  is  the  flotation  force. 


FB  VFpf 


where 

Vf  = volume  of  the  float 

p£  = fluid  density  at  average  float  temperature 

1 1 PF 

Pf  v f vp (1  + BT)  1 + BT 

where 

vf  = specific  volume  of  the  fluid 

vp  = specific  volume  of  fluid  at  flotation  temperature 

B = volumetric  coefficient  of  fluid  expansion 
(6fluid  " Bfloat} 

T = variation  of  fluid  temperature  from  T 

r 

- (Tx  - V 

pp  = fluid  density  at  flotation  temperature 


From  CSDL  internal  memorandum  from  R.  Masters  to  A Truncale, 
"Gyro  Flotation  Temperature  Determination,"  16  October  1974. 
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Then, 


VFPF  _ FG 
1 + BT  1 + BT 


where 

Fg  = gravitational  force  on  the  float 
Summing  moments  about  F in  Figure  A-2, 

x\ 

ZMR  = 0 = (R  - e) Fg  - RFG  - SFL 

is  defined  as  where  F^  = 0 , and  the  left  float  end  moves 
from  the  top  to  the  bottom  of  the  pivot  restraint  with  in- 
creasing temperature. 

Then, 


and 


from  above. 


(R  - e) F 

B = RFG 

F = 

^G 

B 

(R  - e) 

F = 

fg 

(1  - BT) 

rfg 

fg 

(R  - e) 
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Summing  moments  about  F 


T2  is  defined  as  where  = 0 and  the  right  end  moves  from 
the  top  to  the  bottom  of  the  pivot  restraint  with  increasing 
temperature.  Similarly  it  can  be  shown  that 


Then 


Also 


eL 

eR  + eL 


L 

R + L 

Thus,  the  location  of  T ^ in  the  span  from  to  T 2 depends 
on  the  dry  balancing  of  the  floated  member,  which  informa- 
tion may  be  available  through  manufacturing  specifications 
If  the  float  is  well  balanced,  then  T is  in  the  center  of 

T2  - V 
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INTRODUCTION 


Precision  Navigation  is  no  longer  a dream  of  the  future.  Current 
and  projected  military  aircraft  missions  require  precise  (position, 
velocity,  and  attitude)  reference  for  maximum  effectiveness  and 
utilization  of  associated  sensors.  GEANS  (Gimbaled  Electrically 
Suspended  Gyro  Aircraft  Navigation  System)  laboratory  and  flight 
test  results  demonstrate  accuracy  compatible  with  those  require- 
ments. Flight  tests  have  been  conducted  in  F-4,  C-141  and  C-135 
aircraft  at  CIGTF , Holloman  AFB , as  well  as  in  P-3C,  RC-135,  727 
and  U-2R  aircraft  under  special  applications.  The  significance 
of  the  flight  tests  is  the  demonstration  of  consistent  "spec  type" 
performance  at  0.1  nm/hr  position  error  and  2.0  ft/sec  velocity 
error  in  various  missions.  The  mission  variations  were: 

• Long  Term  (10-14  hours) 

• High  rate  maneuvers  in  the  F-4 

• Polar  Navigation 

• High  Latitude  Self  Alignment 

• Ground  Alignment 

• In-Air  Start-up 

• In-Air  Alignment 

The  significance  of  the  laboratory  tests  is  the  demonstration  of 
similar  performance  in  a laboratory  and  flight  test  environment, 
which  is  primarily  due  to  the  high  quality  inertial  components. 

This  paper  will  present  the  previously  classified  results  of  the 
GEANS  laboratory  and  flight  tests  and  show  the  evolution  of  its 
maturity  through  a logical  series  of  developmental  and  preproduction 
programs . 

Operational  advantages,  maintenance  features,  typical  applications 
and  the  use  of  computer  simulations  to  predict  system  performance 
are  also  discussed.  These  aspects  of  the  GEANS  further  demonstrate 
how  this  sytem  can  be  used  to  advantage. 
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Schedule  of  ESG  Airborne  System  Development 

Use  of  ESG  for  airborne  applications  has  been  under  Air  Force  develop- 
ment with  sponsorship  by  AFAL  since  1959.  The  first  series  of  R&D 
contracts  culminated  in  a prototype  system  that  was  laboratory  tested 
at  Honeywell  prior  to  flight  testing  on  a C-124  out  of  Wright- 
Patterson  AFB  from  October  1966  to  April  1967.  This  flight  test 
was  very  successful  and  culminated  in  the  GEANS  development  which 
occurred  from  June  1968  until  April  1971. 

The  GEANS  program  produced  three  production  prototype  systems  that 
were  flight  tested  at  CIGTF , Holloman  AFB  in  1971,  1972  and  1974. 

The  aircraft  used  were  F-4,  C-141,  and  NC-135. 

Following  the  GEANS  flight  tests  was  a program  to  redesign  certain 
portions  of  the  electronics  to  make  them  more  producible  without 
degrading  reliability  or  performance.  Two  additional  systems  were 
built  and  all  five  systems  were  optimized  in  this  manner.  The 
resulting  equipment  was  used  on  programs  with  P-3C,  RC-135,  U2R 
and  727  aircraft. 

The  SPN/GEANS  Program  (Standard  Precision  Navigator)  was  initiated 
in  1973  to  further  optimize  the  GEANS  design  for  increased  reli- 
ability, lower  acquisition  and  maintenance  costs  and  radiation 
hardening  without  affecting  performance.  Eight  SPN/GEANS  are  being 
built  by  the  Air  Force  for  test  and  evaluation.  The  systems  are 
production  models.  It  is  the  goal  of  the  SPN  Program  Office  to  make 
the  system  an  Air  Force  inventoried  system  for  applications  needing 
a precision  inertial  navigator.  The  current  Program  Manager  at 
AFAL  is  Mr.  Ron  Ringo  who  was  responsible  for  initiating  the  SPN/GEANS 
program.  The  first  system  was  shipped  to  CIGTF  as  scheduled  on 
15  October  1975. 

Since  the  initial  GEANS  Contract,  the  Air  Force  and  Honeywell  have 
structured  the  development  as  a balanced  design  of  reliability, 
maintainability,  producibility  and  performance  to  provide  low  cost 
of  ownership.  To  this  date  the  program  goals  have  been  met  in  these 
areas  and  the  forthcoming  SPN  flight  test  is  the  culmination  of  the 
development  and  test  of  the  SPN/GEANS  design. 
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FIGURE 


Exploratory  Development  System 


The  exploratory  development  system  used  a gimbaled,  space  stable  pure 
inertial  mechanization.  Two  miniature  electrically  suspended  (MEGs) 
were  used  for  stabilization.  Three  GG  177  accelerometers  operating 
in  a pulse  rebalance  mode  provided  measurement  of  change  in  velocity. 
The  test  concept  involved  installation  of  the  system  in  a van, 
followed  by  installation  of  the  van  in  a C-124  for  flight  test. 
Additional  details  of  the  test  concept  appear  in  Reference  A.  Typical 
reaction  time  was  long  including  spinup  time,  thermal  stabilization, 
and  gyro  calibration,  and  one  hour  for  self -alignment . The  laboratory 
test  summary  includes  tests  which  preceded  or  which  were  interspersed 
with  the  flight  tests,  and  which  used  the  same  runup  procedures. 
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Flight  Test  Exploratory  Development  System 


Flight  test  of  the  exploratory  development  system  was  performed  in 
a C-124  operating  out  of  Wright  Patterson  Air  Force  Base,  Ohio. 

Twelve  successful  flight  tests  were  obtained,  including  a low  latitude 
exercise  out  of  Ramey  Air  Force  Base  (Puerto  Rico) . Late  in  the 
test  program,  a revised  self-alignment  routine,  which  required  only 
ten  minutes,  was  successfully  tested.  These  test  results  were  the 
basis  for  a report  to  Congress  that  "the  preliminary  analysis  of  the 
flight  test  data  indicated  that  the  ESG  system  accuracy  exceeds  that 
of  any  other  system  flown  to  date." 

An  important  aspect  of  the  combined  laboratory  and  flight  test 
results  is  that  in  the  flight  test  environment  the  system  experienced 
very  comparable  performance  relative  to  the  demonstrated  laboratory 
performance.  It  will  be  seen  that  this  highly  desireable  character- 
istic persisted  through  the  subsequent  developments. 


FIGURE 


GEANS  Laboratory  Test  Results 

The  GEANS  development  was  initiated  in  1968.  The  system  was  sub- 
sequently given  the  Air  Force  designation  of  AN/ASN-101.  Detailed 
descriptions  of  the  development  concepts  and  of  the  resulting  hard- 
ware have  previously  appeared  in  published  literature;  for  example, 
References  A and  B.  Performance  of  the  system  has  only  recently 
been  declassified. 


The  summary  of  GEANS  laboratory  performance  includes  the  results 
from  twenty-four  laboratory  tests  which  were  interspersed  with 
flight  testing  at  Holloman  Air  Force  Base  in  1972.  Demonstrated 
reaction  times  were  of  the  order  of  fifty-five  minutes  including 
fourteen  minutes  for  runup  and  forty-one  minutes  for  thermal 
stabilization  and  self-alignment.  Note  that  the  gyro  calibration 
on  each  run,  which  characterized  the  earlier  exploratory  development 
tests  has  been  deleted,  and  that  the  time  required  for  runup  and 
thermal  stabilization  has  been  reduced. 
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GEANS  Flight  Test  Results 

Extensive  flight  testing  of  the  AN/ASN-101  (GEANS)  was  accomplished 
at  Holloman  Air  Force  Base  in  1971  and  1972.  The  composite  summary 
of  flight  test  results  represents  thirty-three  data  flights  in  1972 
including  operation  in  both  an  F4D  and  in  a NC-135,  and  including 
high  latitude  flights  out  of  Eielson  Air  Force  Base,  Alaska.  Details 
of  the  testing  appear  in  Reference  C and  D. 


FIGURE 


AN/ASN-101  (GEANS)  F-4  Flxght  Test 


The  AN/ASN-101  (GEANS)  was  subjected  to  the  following  dynamic 
environments  as  a part  of  the  F4D  fighter  test  program  at  Holloman 

• Aerobatic  Flight  (rolls,  chandelles,  loops,  immelmans,  etc.) 

• Clockwise  rectangle  pattern  flights 

• Z Pattern  Flights 

• Supersonic  Flight 

• Low  Level,  subsonic  flights 

• High  speed  taxi  test 

The  maximum  g levels  during  the  fighter  test  program  were  +5.5  g's 
and  -1.5  g's  as  established  by  limitations  on  the  test  aircraft. 


AN/ASN-101  (GEANS)  High  Latitude  Flight  Test 


At  the  conclusion  of  the  flight  test  activity,  a series  of  high 
latitude  exercises  were  conducted  from  Eielson  Air  Force  Base,  Alaska 
in  August,  1972.  The  purpose  was  to  evauate  system  performance  at 
higher  latitudes.  Four  pure  inertial  flights  were  made  including  a 
polar  flyover. 


An  optimization  program  was  initiated  following  completion  of  the 
AN/ASN-101  (GEANS)  flight  testing  previously  described.  The 
objectives  were  to  remove  limitations  and  design  deficiencies  un- 
covered during  that  testing.  Provision  of  a "Zero  Reaction  Time" 
capability  through  implementation  of  air  start/air  align  was  a 
primary  objective. 


The  optimized  system  was  returned  to  Holloman  AFB  in  1974  for  flight 
test  in  a C-141.  In-air  start  was  facilitated  by  use  of  the  AHRS  as 
an  attitude  reference  during  spinup.  Velocity  and  position  corrections 
were  entered  manually  during  the  in-air  alignment.  The  accompanying 
figure  illustrates  a representative  test. 
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AN/ASN-101  (GEANS)  System  Test  Results  on  Project  Magnet 

Since  April,  1974,  a GEANS  System  has  been  flying  on  NAVOCEANO 1 s 
PROJECT  MAGNET  P-3C,  which  is  charting  the  earth's  magnetic  fields. 
A single  GEANS  has  flown  in  over  104  missions  on  this  program  with 
typical  navigation  periods  in  excess  of  10  hours. 


The  results  on  the  accompanying  chart  show  a CEP  of  0.13  nm/hr . 
This  is  an  unaided,  undamped  system  that  is  used  as  the  primary 
inertial  reference  on  this  program,  which  requires  an  accurate  and 
reliable  system  unaffected  by  the  diversified  mission  scenario, 
including  extended  operation  at  low  altitudes  (<1,000  feet)  with 
frequent  turbulence  and  buffeting. 


PERFORMANCE 
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Results  of  SPN/GEANS  Lab  Tests 

The  SPN/GEANS  Program  (Standard  Precision  Navigator)  was  initiated 
in  1973  to  further  optimize  the  GEANS  design  for  increased  reli- 
ability, lower  acquisition  and  maintenance  costs  and  radiation 
hardening  without  affecting  performance. 


The  first  SPN  System  was  shipped  to  CIGTF  on  15  October  1975  for 
flight  test  verification  on  a C-141.  Before  the  system  was 
shipped,  it  was  subjected  to  an  extensive  series  of  laboratory 
tests  to  establish  its  performance  signature. 


As  has  been  previously  stated,  an  excellent  correlation  between 
lab  tests  and  subsequent  flight  tests  has  been  demonstrated  on 
earlier  ESG  equipment,  therefore,  the  SPN  laboratory  performance 
is  expected  to  be  a good  indication  that  specification  performance 
will  be  met  in  the  flight  test  program.  The  chart  presents  the 
results  of  a series  of  tests  on  SPN  No.  2 with  various  headings, 
with  and  without  Scorsby  Table  Motion,  with  reaction  times  of 
31  to  43  minutes.  The  composite  results  of  these  nine  runs  was 
CEP  = 0.06  and  one  sigma  radial  = 0.05  (nm/hr  after  six  hours) . 

The  composite  of  25  laboratory  runs  was  a CEP  of  0.05  nm/hr. 
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SPN/GEANS  LAB  TEST  RESULTS 


FIGURE  10 


SPN/GEANS  System  No.  2 Lab  Acceptance  Test  Run 


This  chart  shows  the  actual  acceptance  test  run  position  error  plot 
for  SPN  System  No.  2 before  it  was  shipped  to  CIGTF . The  length 
of  the  test  was  12  hours  with  an  RSS  of  0.03  nm/hr  with  and  without 
Scorsby  Motion  and  with  various  heading  changes.  The  heading 
changes  were  made  at  42  minute  intervals  to  excite  Schulers  as 
much  as  possible.  The  resulting  position  error  plot  clearly 
indicates  the  systems  excellent  performance  under  these  conditions. 


Operational  Advantages  of  SPN/GEANS 


The  operational  advantages  of  SPN/GEANS  originate  primarily  from 
the  inherent  capabilities  of  the  ESG,  but  not  entirely.  The  ESG 
design  permits  SPN  to  operate  during  long  missions  with  severe 
aircraft  dynamics  and  no  external  aids  and  still  achieve  its  inherent 
performance  capabilities.  It  also  allows  150  days  between  calibrations 
without  affecting  mission  effectiveness.  However,  the  remaining 
system  design  features  of  radiation  hardening,  precise  sensor  data, 
zero  reaction  time,  world-wide  capability,  ease  of  maintenance  and 
proven  modular  software  are  a result  of  a balanced  design  emphasizing 
operational  flexibility  without  sacrificing  cost  and  simplicity.  The 
mechanical,  electrical  and  software  design,  coupled  with  the  accuracy 
and  predictability  of  the  ESG  and  the  GG  177  accelerometer,  give 
the  user  an  inertial  navigator  that  will  meet  and  surpass  most 
aircraft  requirements  for  the  foreseeable  future  at  a low  cost  of 
ownership . 
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• Modularized  software 


SPN/GEANS  is  Easily  Maintainable  by  Air  Force  Field  Level  Personnel 

From  the  inception  of  the  GEANS  Development  Program,  Maintainability 
and  low  Cost  of  Ownership  have  been  part  of  the  design  and  develop- 
ment requirements.  Maintainability  features  and  requirements  were 
not  only  a function  of  the  design  process,  but  also  complete  support 
planning  was  included.  The  SPN/GEANS  Program  Office  required  constant 
review  and  validation  of  the  design  for  maintenance  as  well  as  other 
design  features.  The  maintainability  characteristics  have  been 
proven  in  the  field  by  the  following  examples: 

• Complete  disassembly,  repair  and  reassembly  of  tne  IMU 
gimbal  assembly  in  less  than  eight  hours  by  one  technician. 

• Replacement  of  gyro  and  VMUs  at  intermediate  level  in  less 
than  one  hour  excluding  calibration. 


• Achieved  0.2  maintenance  hour  per  flight  hour  versus  a require- 
ment of  1.0  maintenance  hour  per  flight  hour  for  all  levels 
of  maintenance. 

The  accompanying  chart  shows  the  sequence  of  maintenance  actions  in 
replacing  a VMU  by  using  photographs  of  the  system. 


SPN/GEANS  IS  EASILY  MAINTAINABLE 


COVER  IS  EASILY  REMOVED  FROM  IMU 


Computer  simulation  is  used  by  Honeywell  as  an  effective  means  of 
predicting  what  inertial  system  performance  will  be  under  various 
dynamic,  as  well  as  static,  conditions.  It  is  an  excellent  tool 
to  statistically  verify  the  system  error  budget  by  adjusting  para- 
meter variations.  System  math  models  can  be  verified  and,  in  fact, 
unknown  models  can  be  established.  Vehicle  dynamics  are  included  so 
the  expected  performance  of  the  system  under  a specific  mission 
scenario  can  be  predicted  very  accurately.  The  capability  of  the 
inertial  system  to  perform  missions  such  as  missile  initialization, 
weapon  delivery,  motion  compensation,  vehicle  steering,  etc.,  can 
be  established  with  a high  degree  of  confidence  with  this  type  of 


computer  simulation. 


Simulation  Example 


The  simulation  used  as  an  example  of  how  the  SPN  system  would 
perform  in  an  operational  environment  is  the  classic  si rategic 
bomber  mission.  The  system  is  in-air  aligned  while  the  aircraft 
is  climbing  to  altitude,  using  doppler  radar  and  position  fixes 
every  15  minutes,  with  an  accuracy  of  1,600  feet  CEP.  The  doppler 
is  turned  off  for  the  period  over  water  and  turned  on  again  at  the 
landfall  checkpoint  where  the  aircraft  has  dropped  to  low  level  for 
penetration.  During  penetration  there  is  automatic  terrain  following/ 
terrain  avoidance  (TF/TA)  with  a significant  g variation.  There  are 
also  fixes  every  30  minutes  with  the  same  accuracy  as  during  in-air 
align.  For  comparison  purposes  the  simulation  shows  what  would 
happen  if  the  doppler  was  not  turned  on  and  fixes  were  not  obtained 
after  landfall.  Position  CEP  and  velocity  errors  are  plotted  for 
both  cases. 


342 


IT  1 11—— 


Application  of  SPN/GEANS 


World  -wide 
Capability 


"0"  Reaction 

(Air  Start/Air  Align) 


Sensor  Alignment  and 
Motion  Compensation 


No  External  Aides 
Required 


50  Day  Calibration 
(No  Calibration  Required 
for  0.5  nm/hr  Accuracy) 


Nuclear  Hardened 


Potential  applications  of  SPN/GEANS  span  the  fleet  of  aircraft 
needing  an  inertial  system  that  is  highly  accurate,  maintainable, 
has  low  cost-of-ownership , nuclear  hardened  by  design  and  has  a 
high  MTBF.  The  features  and  capabilities  of  the  system  that  high- 
light its  advantages  for  specific  applications  are  easily  shown  in 
the  following  table. 


Weapon 

Initialization 


Low  Sensitivity  to 
Aircraft  Dynamics 


APPLICATION  OF  SPN/GEANS 


FIGURE  16 
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ANALYSIS  OF  DECISION  CRITERIA  FOR  EXERCISING 
RELIABILITY  IMPROVEMENT  WARRANTY  OPTIONS 
ON  THE  F-16  AIRCRAFT 


The  F-16  aircraft  full  scale  development  and  production  contract 
incorporated  a variety  of  mechanisms  for  motivating  the  F-16  contractor 
to  design  features  into  the  aircraft  that  would  tend  to  reduce  life  cycle 
cost  (see  Chart  1).  One  of  these  is  a contractual  commitment  to  ensure 
that  certain  target  levels  of  supportability  are  achieved  by  several 
aircraft  subsystems  that  have  historically  been  very  costly  to  produce 
and  maintain,  e.g.,  the  flight  control  computer,  inertial  navigation 
system,  heads-up  display,  etc.  This  contract  provision  is  called  a 
Logistic  Support  Cost  Commitment  (LSCC)  or  Target  Logistic  Supp  rt  Cost/ 
Correction  of  Deficiencies  (TLSC/COD)  provision  and  it  addresses  tnirteen 
such  high  cost  items  which  are  referred  to  in  the  contract  as  Control 
First  Line  Units  (FLUs) . It  includes  a TLSC  which  was  established 
during  contract  negotiations  using  a simplified  version  of  the  Air  Force 
Logistics  Command's  Logistic  Support  Cost  (LSC)  Model  as  a framework 
for  cost  accumulation.  It  calls  for  a 3500  flying  hour  verification 
test  beginning  six  months  after  Initial  Operational  Capability  (IOC)  is 
established.  During  this  test,  LSC  model  parameter  estimates  will  be 
updated  and  a Measured  Logistics  Support  Cost  (MLSC)  will  be  computed. 

If  the  MLSC  is  less  than  the  TLSC,  the  contractor  will  be  eligible  for 
an  award  fee  under  the  LSCC  whereas,  if  the  MLSC  exceeds  the  TLSC  by  mere 
than  25%,  a correction  of  deficiencies  (COD)  program  will  be  undertaken. 

The  contract  also  allows  for  the  Air  Force  to  exercise  a option  to 
purchase  either  a fixed  price  four  year  Reliability  Improvement  Warranty 
(RIW)  or  an  RIW  with  MTBF  guarantee  (RIW/MTBF)  in  place  of  the  LSCu  r 
any  number  of  the  control  FLUs.  Under  the  RIW,  the  contractor  ca.> 
increase  his  profit  by  improving  equipment  reliability.  The  RIW  in  j.udes 
a remedy  from  the  contractor  for  slow  repair  turnaround  time  in  the  form 
of  a requirement  to  provide  additional  spare  FLUs  at  no  cost  to  the  Air 
Force.  The  RIW/MTBF  is  similar  to  the  RIW  except  it  includes  a series 
of  MTBF  targets  which  must  be  met  over  the  four  year  period.  Its  initial 
fixed  price  is  larger  than  that  of  the  RIW  in  order  to  compensate  the 
contractor  for  assuming  the  additional  risk  of  failure  to  meet  these 
guaranteed  MTBFs. 

Finally,  the  contract  includes  ceiling  prices  for  both  an  RIW  and 
an  RIW/MTBF  at  the  module  level.  Actual  prices  for  both  these  latter 
warranty  options  were  not  negotiated  during  F-16  full  scale  development  - 
production  contract  negotiations  because  the  control  FLU  modules  were 
not  sufficiently  defined  at  that  time.  Hence,  for  each  control  FLU,  the 
Air  Force  can  consider  any  one  of  five  contractual  mechanisms  as  a means 
of  controlling  F-16  logistics  support  costs:  LSCC,  RIW,  RIW/MTBF,  RIW 


at  the  module  level,  and  RIW/MTBF  at  the  module  level.  The  Air  Force 
must  decide  which  of  these  options  to  exercise  for  each  control  FLU 
prior  to  the  initiation  of  F-16  production  (January  1977).  This  set 
of  decisions  will  have  a significant  impact  both  on  Air  Force  costs  and 
on  F-16  mission  reliability.  In  the  remainder  of  this  paper,  a methodology 
recently  developed  at  the  Air  Force  Institute  of  Technology  (AFIT)  for 
analyzing  these  decisions  in  terms  of  their  impact  on  cost  and  mission 
reliability  is  presented. ^ 

Air  Force  Costs  Under  the  Logistic  Support  Cost  Commitment 

The  first  stage  ot  the  methodology  essentially  consists  of  a sample 
analysis  of  total  variable  costs  to  the  Air  Force  of  each  of  the  first 
three  decision  alternatives  (LSCC,  RIW,  and  RIW/MTBF). ^ Chart  2 
summarizes  the  three  key  types  of  Air  Force  cost  under  the  LSCC.’  First, 
there  is  FLU-related  logistic  support  cost.  The  three  dominant  elements 
of  this  cost  (initial  and  replacement  spares  costs,  on-equipment  main- 
tenance costs,  and  off-equipment  maintenance  costs)  are  estimated  using 
the  first  three  equations  of  the  modified  AFLC  LSC  Model.  A lifetime 
of  15  years  is  assumed.  The  monthly  peak  force  flying  hours  (PFFH)  used 
in  the  computation  of  spares  costs  is  currently  projected  to  be  achieved 
during  the  fifth  year  after  production  begins. 

The  second  primary  type  of  cost  incurred  under  the  LSCC  is  related 
to  contractor  performance.  First,  there  is  a COD  target  price.  This  is 
a negotiated  dollar  amount  for  each  control  FLU  which  will  be  paid  by 
the  Air  Force  for  technical  risks  assumed  by  the  contractor  under  the  LSCC. 
Second,  there  may  be  costs  connected  with  COD  modification.  Namely,  if  the 
COD  provision  is  invoked  and  the  contractor  is  required  to  remedy  supporta- 
bility-related  equipment  problems,  a portion  of  the  costs  of  these  remedies 
may  be  incurred  by  the  Air  Force  depending  on  the  magnitude  of  other 
contractor  costs  under  the  incentive  sharing  arrangement  of  the  production 
contract. 


1.  This  methodology  was  developed  in  the  following  two  Masters  thesis 
efforts  at  the  AFIT  School  of  Engineering  (Department  of  Systems  Manage- 
ment (AFIT/ENS)): 

a.  Capt  T.  Koegel  and  Capt  N.  Mills,  "An  Analysis  of  Decision 
Criteria  for  the  Selection  of  F-16  Reliability  Improvement  Incentive 
Alternatives,"  Air  Force  Institute  of  Technology,  Wright-Patterson 
Air  Force  Base,  Ohio,  45433,  June  1975. 

b.  Capt  A.  Doman  and  Capt  A.  Dunkerley,  "Evaluation  of  F-16  Subsystem 
Options  Through  the  Use  of  Mission  Completion  Success  Probability  and 
Designing  to  System  Performance/Cost  Models,"  Air  Force  Institute  of 
Technology,  Wright-Patterson  Air  Force  Base,  Ohio,  45433,  September  1975. 

Both  thesis  efforts  were  conducted  under  the  direction  of  Major  Robert  Tripp 
of  AFIT/ENS  and  the  author. 

2.  The  methodology  does  not  explicitly  treat  the  module  level  RIWs  because 
module  data  was  not  yet  available  when  methodology  development  was  undertaken. 
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The  third  key  type  of  cost  to  the  Air  Force  under  the  LSCC  is  an 
award  fee  for  which  the  contractor  becomes  eligible  if  the  MLSC  during 
the  3500  hour  verification  test  is  less  than  the  TLSC.  The  ntal  amount 
of  this  fee  for  all  thirteen  control  FLUs  is  $2M. 

Air  Force  Costs  Under  the  Reliability  Improvement  Warranty 

Air  Force  costs  under  the  RIW  comprise  three  main  elements  (see 
Chart  3).  First,  the  negotiated  fixed  price  of  the  RIW  covers  the 
estimated  cost  of  contractor  repair  of  all  FLU  failures  during  the  four 
year  warranty  period.  It  also  reflects  consideration  of  profit  and  the 
risk  of  higher  than  expected  contractor  costs  due  to  poor  equipment 
performance  in  the  field.  An  advantage  of  the  RIW  is  that  the  contractor 
has  considerable  control  over  the  repair  process.  Namely,  he  can  modify 
his  equipment  as  it  passes  through  his  repair  facility  to  increase  its 
reliability  in  the  field,  thereby  decreasing  the  frequency  of  subsequent 
returns  to  his  facility  and,  hence,  his  subsequent  repair  costs. 

The  second  major  RIW  cost  is  the  cost  of  FLU  spares.  The  methodology 
also  uses  the  spares  equation  from  the  AFLC  LSC  Model  to  compute  this 
figure.  Although  the  PFFH/month  figure  used  here  is  less  than  under  the 
LSCC  (PFFH  at  the  four  year  point  as  opposed  to  PFFH  after  all  production 
aircraft  have  been  fielded) , cost  of  initial  pipeline  spares  is  very  much 
higher  because  of  100%  depot  (contractor)  repair  under  the  RIW  as  opposed 
to  less  than  10%  under  the  LSCC. 

The  final  major  cost  elements  under  the  RIW  are  the  costs  of  on- 
equipment  and  off-equipment  FLU  maintenance  during  the  eleven  years  of 
aircraft  life  after  the  four  year  RIW  period.  Appropriate  AFLC  LSC  Model 
equations  are  used  to  compute  these  costs  also.  An  interesting  property  of 
the  RIW  is  that  the  number  of  spare  FLUs  required  during  the  four  year  RIW 
period  is  much  more  than  adequate  to  support  the  equipment  under  t e organic 
maintenance  concept  during  the  remainder  of  its  life.  One  possibility  that 
arises  here  is  that  some  of  these  excess  spares  can  be  installed  on  new 
aircraft  during  the  fifth  year  of  production,  thereby  decreasing  effective 
RIW  costs  to  the  Air  Force.  This  possibility  is  currently  being  inves- 
tigated by  the  Air  Force. 

Air  Force  Costs  Under  the  RIW/MTBF 


The  structure  of  costs  to  the  Air  Force  under  the  RIW/MTBF  is  very 
similar  to  the  RIW  cost  structure  (see  Chart  4).  Besides  a greater 
initial  fixed  price  to  cover  increased  risk  to  the  contractor  as  noted 
earlier,  the  main  difference  in  cost  structure  lies  in  the  area  of  spares. 
Under  the  RIW/MTBF,  a low  MTBF  in  the  field  can  result  in  a greater 
requirement  for  the  contractor  to  provide  consignment  spares  than  under 
the  regular  RIW.  If  this  low  MTBF  persists  through  the  four  year  point, 
these  consignment  spares  become  the  property  of  the  Air  Force,  thus 
reducing  total  costs  to  the  Air  Force  more  than  would  occur  in  the  case 
of  the  RIW  under  similar  conditions. 
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Costs  Ignored  by  the  AFIT  Methodology 


The  AFIT  methodology  ignores  several  traditional  elements  of  cost 
in  its  analysis  of  the  various  control  FLU  decision  alternatives  (see 
Chart  5).  In  many  cases  this  is  done  in  the  interest  of  simplicity  and 
can  be  easily  justified.  For  example,  it  is  anticipated  that  R&D  and 
unit  production  costs  will  not  vary  from  one  decision  alternative  to  the 
next  and,  hence,  need  not  be  addressed.  The  methodology  developers  argue 
that  three  classical  elements  of  logistic  support  cost,  namely,  cost  of 
inventory  entry  and  supply  management,  cost  of  personnel  training  and 
training  equipment,  and  cost  of  management  and  technical  data,  are  similar 
enough  for  all  the  decision  alternatives  to  be  justifiably  ignored  in  the 
interests  of  simplicity.  The  methodology  excludes  consideration  of  the 
cost  of  support  equipment  (SE)  because  there  is  no  requirement  for  SE 
peculiar  to  control  FLUs  only.  Additional  elements  of  costs  that  are 
relatively  small  in  size  such  as  the  cost  of  removing  and  replacing  failed 
FLUs  on  the  aircraft  under  the  RIW  are  also  ignored.  However,  two 
potentially  significant  elements  of  cost,  namely,  cost  of  stockage  and 
repair  of  FLU  lower  level  assemblies  and  cost  of  packaging  and  shipping, 
are  not  addressed  by  the  methodology  because  there  was  no  available  data 
in  these  areas  during  the  period  of  methodology  development.  Any  future 
update  of  the  methodology  should  attempt  to  address  these  cost  elements. 

The  Mission  Reliability  Methodology 

In  addition  to  cost,  the  AFIT  methodology  incorporates  a capability 
to  examine  the  impact  of  the  control  FLU  decision  alternatives  on  mission 
reliability.  The  first  step  in  this  computation  is  the  calculation  of 
the  aircraft  mission  reliability  as  measured  by  mission  completion  success 
probability  (MCSP) . This  is  done  using  an  MCSP  model  developed  in  recent 
years  at  Kirtland  AFB  (see  Chart  6)  . ^ This  model  requires  three  types  of 
input  information:  (1)  a description  of  the  aircraft  mission  profile,  i.e., 

the  lengths  of  each  of  the  mission  phases,  (2)  an  estimate  of  the  MTBF 
expected  to  be  achieved  in  the  steady  state  under  each  of  the  three 
decision  alternatives  for  each  of  the  control  FLUs,  and  (3)  an  estimate  of 
the  conditional  probability  of  an  aircraft  abort  given  a FLU  failure  for 
each  of  the  control  FLUs  anc  each  of  the  mission  phases.  The  main  purpose 
of  these  conditional  abort  probabilities  is  to  reflect  differing  degrees 
of  criticality  with  respect  to  mission  success  from  one  FLU  to  the  next. 

The  MCSP  model  provides  three  kinds  of  output  information.  First, 
it  ranks  the  set  of  FLUs  being  examined  in  terms  of  probability  of  causing 
an  aircraft  mission  abort.  Second,  it  can  provide  an  analysis  of  sensi- 
tivity of  the  aircraft  MCSP  to  changes  in  one  or  more  of  the  FLU  MTBFs. 
Finally,  it  computes  the  aircraft  MCSP  that  results  from  a given  combination 


3.  This  model  is  described  in  detail  in  "Models  and  Methodology  for  Life 
Cycle  Cost  and  Test  and  Evaluation  Analyses"  (OAS-TR-73-6) , by  R.H.  Anderson 
et  al,  Directorate  of  Aerospace  Studies,  DCS /Development  Plans,  Air  Force 
Systems  Command,  Kirtland  AFB,  New  Mexico,  87117,  July  1973  (DDC  //AD782182). 
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Chart  6 


of  decision  alternatives  on  the  control  FLUs , e.g.,  (1)  RIW  on  the  flight 
control  computer,  (2)  TLSC/COD  on  the  inertial  navigation  system,  (3) 
RIW/MTBF  on  the  heads-up  display,  (A)  similarly  on  FLUs  4 through  13.  In 
general,  a change  in  decision  alternative  for  one  or  more  FLUs,  e.g., 
going  from  an  RIW  to  an  RIW/MTBF  on  the  flight  control  computer,  would 
result  in  a different  aircraft  MCSP  which  could  easily  be  computed  by  the 
MCSP  model. 

The  next  stage  of  the  AFIT  methodology  combines  both  the  cost  and 
mission  reliability  information  examined  so  far.  An  optimization  procedure 
is  used  to  determine  that  combination  of  control  FLU  decision  alternatives 
which  results  in  a maximum  MCSP  for  any  given  expenditure  of  alternative 
dependent  Air  Force  costs. ^ Chart  7 provides  a conceptual  picture  of  this 
process.  The  horizontal  axis  measures  cost  and  the  vertical  axis  measures 
MCSP.  Each  X represents  some  combination  of  control  FLU  decision 
alternatives  in  terms  of  its  impact  on  these  two  parameters. 5 The  base- 
line point,  computed  by  the  procedure,  is  that  combination  of  decision 
alternatives  which  results  in  a minimum  MCSP.  The  adjusted  baseline 
point,  also  computed  by  the  procedure,  is  the  least  cost  combination  of 
decision  alternatives.  Each  consecutive  vertex  point  on  the  concave 
piecewise  linear  curve  that  connects  to  the  adjusted  baseline  point 
reflects  a change  of  decision  alternative  for  one  control  FLU. 

Clearly,  this  curve  provides  the  decision  maker  with  a means  of 
discriminating  among  alternatives.  He  may  simply  be  interested  in  that 
set  of  alternatives  which  results  in  least  cost  to  the  Air  Force.  If 
so,  the  methodology  determines  the  unique  combination  of  alternatives 
that  has  this  attribute,  namely,  the  adjusted  baseline  point.  Or  perhaps 
he  is  willing  to  incur  additional  costs  to  achieve  a higher  aircraft 
mission  reliability.  If  so,  the  methodology  provides  him  with  an  estimate 
of  the  unique  maximum  mission  reliability  combination  of  decision  alter- 
natives that  is  achievable  for  any  additional  Air  Force  expenditure.  Or 
maybe  he  is  interested  in  a particular  combination  of  alternatives  that 
lies  below  the  concave  curve  but  reflects  certain  qualitative  attributes 
not  shared  by  any  of  the  maximum  MCSP  combinations.  For  example,  perhaps 
he  is  inclined  to  choose  the  TLSC/COD  alternative  for  all  13  control  FLUs 
mainly  because  he  feels  it  is  important  to  maintain  the  higher  level  of 
Air  Force  self  sufficiency  reflected  by  organic  maintenance  as  opposed  to 
contractor  maintenance  under  either  type  of  RIW.  If  so,  computation  of 
the  concave  curve  of  maximum  MCSP  combinations  provides  him  with  an 
estimate  of  how  much  he  is  sacrificing  in  terms  of  cost  and  mission 
reliability  in  choosing  this  combination  of  alternatives.  A variety  of 
additional  tradeoffs  that  confront  the  decision  maker  can  be  explicitly 
characterized  through  computation  of  the  maximum  MCSP  curve. 


4.  This  optimization  procedure  was  also  developed  at  Kirtland  AFB  and 
is  described  in  the  document  referred  to  in  footnote  3. 

5.  If  there  are  n FLUs  (in  this  case,  13)  being  considered  and  m 
decision  alternatives  for  each  FLU  (in  this  case,  3) , the  number  of 
these  possible  combinations  is  mn  (or  3^  = 1,594,323). 
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Summary 

In  the  near  future,  the  Air  Force  will  have  to  decide  ' ether  to 
exercise  warranty  options  on  each  of  several  F-16  control  fi  u line 
units.  This  paper  has  briefly  described  a methodology  recently  developed 
by  four  students  in  the  AFIT  School  of  Engineering  for  analyzing  the 
impact  of  this  set  of  decisions  on  total  cost  to  the  Air  Force  and  F-16 
mission  reliability.  This  work  has  demonstrated  that  this  set  of  decisions 
is,  indeed,  complex.  It  has  provided  considerable  insight  into  a variety 
of  different  ways  that  t^ese  decisions  impact  cost  and  mission  reliability. 
These  insights  should  be  utilized  along  with  consideration  of  decision 
impact  in  such  qualitative  areas  as  Air  Force  self  sufficiency  when  the 
decisions  are  actually  made. 
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in  the  U.  S.  Army  in  World  War  II  and  graduation  from  Northeastern 
University  with  a BS  Degree  in  Mechanical  Engineering,  he  joined  the 
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441 


i B>— 


tW 


! 


_ V X 1 ■ ■» 

wJ**  ' • * Mw £®5 

Bl  MM 

^R  ■/  mm 

i x-  -^1 

■ 

11/75  CD7678 


11/75  CD7679 


«3  co 
£ < 
ll 

o>  £ 

.2  ^ 

^ 3 

c - 
.E  to 

k.  CL 

2j 

“ §■ 

— i_ 

to  O 
00  h- 

£ -O 

c 0) 
0)  0) 

E 

3 W 


(/» 

0)  05 

CC  C 

TO  J= 

.E  3 

E m 
to  E 

■M  Q, 

s«> 

C/5 

o rc 
♦3  u 
■o  M- 

o o 

£ > 


aj  ® 42 
E OC  c 
o -o  g 
E c E 
to  «»  = 
C O!  v 
>.  *♦-  </s 

S’3S 


(/) 

> o 

« - 

go 


Oj  "O 

&§ 
te  o 


73  </) 
-3  -* 
TO  C 
3:  to 

&x 


w 

1- 

c 

TO 

O 

</> 

05 

1q 

TO 

T3 

C 

3 

2 

O 

05 

c 

* 

c 

o 

o 

c/5 

>» 

-C 

CL 

c 

Z 

TO 

TO 

"to 

cc 

CC 

“O 

TO 

CO 

CO 

z 

TO 

TO 

QQ 

-C 

o 

“J 

TO 

i_ 

CL 

TO 

TO 

CQ 

c/5 

05 

_c 

N 

TO 

mmJ 

o 

CO 

*-> 

C 

TO 

TJ 

c 

TO 

TO 

3 

j< 

TO 

C 

C 

C/5 

o 

TO 

TO 

> 

LU 

< 

C 

TO 

CQ 

C/5 

05 

TO 

E 

LJ 

_j 

LU 

c 

3 

k. 

i/t 

TO 

H- 

TO 

</> 

D 

O 

•4-< 

a 

CO 

TO 

C3 

TO 

□ 

2 

< 

C 

z 

CQ 

. 


11/75  CD7681 


INSTRUMENT  GAS  AND  BALL  BEARING  WORKSHOP 
INSTRUMENT  RELIABILITY  vs.  BEARING  CONDITION 


1 1/75  CD7683 


11  75CD7684 





THRUST  LOAD 


TORQUE  ANALYSIS  CAN: 


1.  SPOT  RACE  DEFECTS 

2.  INDICATE  GROSS 

SURFACE  DIFFERENCES 

3.  OCCASIONALLY  DETECT 

GEOMETRY  EFFECTS 

4.  INDICATE  LIKELY  GOOD 

PERFORMANCE  BEARINGS 


INSTRUMENT  BEARING  PERFORMANCE 


APPLICATION 


TEST  BEARING 
OUTER  RING 


-INNER  RING  ADAPTER 
r CALIBRATION  ROD 
l^rBALL  CONTACT  WITH 


f— 

=rBALL  c 

1 

— I 

1 

J 

I 

./**/♦  WV  A'  t’W*  * /.-V 


/3£/9£tAJ6  TO£QJ£ 

s*ev  /r  s' 

VCG62&M  THeVST  Lo#D 


* V 


m 


V . 


<w- 


V.  I NOR  DIVISION 


SR4SS  TORQUE  PATTERN 


C£  Od 
UJ  UJ 


o 


CO 


o 

Q — 
»— 


— o 


o a 

UJ  UJ 

a.  a_ 

Q.  Q_ 
< < 


a o 
z z 
o o 

■<  «< 

o a 


453 


. 3T5  GM.CM. 


— a.  uj  or 

X < £L  U 

<*  _J  a.  »— 

< ZD 

a a _J  o 


□ o cc  S 

O 5 Uj  Q. 
CL  < Q.  K 
— <C 

in  □ a.  m 


.. - 


i 


cm  z 
□ UJ  o 
<za- 

OZUh 
J — h-  < 
HD  ►— 
_J  Q O O 
c LJ  q: 

— D_  Q 


XQ.UCT 

C <C  OL.  UJ  r_3 


— a a 

XlxJUJ 


[f — 

IL  _ 

-r- 

■ ! ! i 

: | ! ! j 

i : : .III 

: 1 ' . ■ 

; | - 1 . . : . . 

i 1 : 
-r  f 1 , 

tj;1  In i 

|l  ! P L 

; i i : 

rttr 

-H  1 1- 
j ; I 

lt>r  !p 

4'  u 
: 1 ! 1 

itij" 
4 ! i 

J i li  TjjT 

- ■*-*  ’ ‘ 

-!fM 
!r  ! 

[FT 
mr 
1 { 1 1 

j*:J  1 

! 

:ii! 

i , { 

“:r 

rp-; 

i : L 

Fti 

n p 

Iffi 

ttTr 

ppr 

||[T 

. . t-4- 

1 

j ['  | j 
f1  ! ’ j 

H' 

rtr 

i li 

• i ' 1 

-t~ri 

p-jr 

— ** 

■ , . 

i 

. ; . .I 

1 

i-  •; 

, ; 

* i ' 

■ | , 

; * 

1 .1  ! 

ini;;; 

rtil: 

J 

. i 

• • • f 
, { 

-}U! 

]j  1 

t 

i 

■ 11L_l 

Ml 

: L 

-:-n 

ri 

t njn  | i | IT 

,i 

U 4!j|!U:  : ...  . . 

! '] L 

4 • 

■ i 

- 1 -> 

!! 

mFiSSma 

nPNHI 

T . 

1 if 

jj 

K-j. 

JTklM  L 

L.  !-j-,  j-iU  t • : 

i ili<  1 1 1 1 

Hi 

i i ; 1 ■ 

hti 

ffiL^SSSnl 

iUII 

i j « 

..Li 

j i ! 
i : ! i 

. . i . 

irlitfl 1 

ijii  Ml,  : '| 

Ji;;: 

• 

• i 

; r:i 

i 1 i 

r rn 

HyiuBSS 

Ijiji  TU.:!' 

| . s 

• 

i • ' 

: , J 

« ‘it 

: ^ 

■ , i 1 1 1 ; ji 

J. ! t ; • 1 U_  4_L. 
1 i 1 1 

rT  i : \ 

1 ii  \\m\ 

J| 

t i i 

j - • 

. .1 

' i « 

. i 

I ' “ 

; ii  i i Li  1 : 

U Lj  li.T  il 
III  l;'-f  Ll 

Hr 

1 i:i 

5 1 lL 

If1; 

’ II  1 » ! 1 ! I 

:iu  unit 

H 

ill  ill  if  il 

p 

li  1 ! 

M1': 

|4 

1 

•i'Jilji  |L 
Tn  it!  i Ti 

.Li.lt 

il  ll,i  1 1 1 5 : 1 1 

-lii 

Hi, 

i i i ■ ‘ 

Si-t: — aaim:!iini 


o 

Q 

LxJ 

LxJ 

Q. 

a. 

O. 

H, 

z 

c 

UJ 

jq: 

.jq: 

►— 

LU 

uj 

ID  Z 

OZ 

O*- 

OO 

zz 

Z ID 

— 

o— 

oo 

a 

s 

Q.  < 

< 

■<c 

aK 

— 

— 

o 

o 

a 

CM  Q£ 

a 

o 

a 

CD 

U 

PLOT  OF  TORQUE 
YERSUS 


o 


cc 


Ll) 

C£ 

K 

UJ 

UJ 

1— 

o 

C 

z 

<* 

Q_ 

— 

Of 

LJ 

Q 

cm 

=3 

UJ 

UJ 

CJ 

Q_ 

»— 

ck 

a. 

=3 

o 

c 

O 

V— 

_i 

a 

CO 

a: 

z 

CO 

UJ 

=> 

Q- 

o 

Of 

< 

a: 

CO 

a. 

CD 

CO 

cr> 


=3  00  — 

□ O DO 


or 


q-cchh 
i — 
incvio> 


470 


375  GM  .CM 


SR4SS  TORQUE  PATTERN 
GROUND  INNER  RACE 


SR4SS  TORQUE 
PAPER  LAPPED 


SR4SS  TORQUE  PATTERN 


C£ 

LlJ 

Z Ctl 
Z LlJ 
— »— 
ZD 
□ O 
LlJ 

CL.  Q 
Q_  UJ 
*<  CL. 
_J  a. 
«< 
a _J 

o a: 

> LU 
< Q_ 
— < 
a o. 


o 


o 


<T> 


CO 


O < I 
—H— 

OKZ 

JQTZO 


— trow 

XU 

-c »—  or  > 
Z3cn  — 
□ ODD 


CLKHZ 
I — 

I0CJO5 


L75 


-T- 

, | 


EXAMPLE  OF  EFFECT  ON  TORQIE  PATTERN  WHEN  INNER  RACE 

HAS  A DEFECT 


r:7T! 

i'll 

_ij ! :|j.| : ; | 

1 

- ♦ { 

mriinwm 

Bifiiiiuma 

, 

•fr1 

IMIiaiiu; 

i 1 u 

r j jr» 

EMI 

- i t 

- i-t  ■ 

if  {p: : 

j|i i,;! 

;'*i 

jfrltf 

it  I j 1 th 

Eiiihi. !. 

r 

i ■ Li'!'  1 

i m - r h ■ r ' 

] 

'jlji  ijill'"'!!  J 

liitiu  'ii: . 1l 

! | ! I i 1 i 1 • 

it:'  rm  -r 

\ 

ui  - 

3 

3?'j-  ' ' “j 

r 

K 

; J ? 

O^i TM  1.  ^ 

J i f 

tjj  ; 1 1 q ttt  jr 

dttk'iJjj 

5 POUND  AXIAL  LOAD 
2 RPM  OUTER  ROTATION 
PAPER  SPEED  2MM/SEC 


I 

! 

} 

r I 


r 


UJ 

O 

-< 

a: 

cc 


<c  o 

Q_  Ixl 


UJ  UJ 
ZD  CD 

a 

cc  < 
o 

I — CO 


— a:  o 

X UJ  UJ 
«<  ►-  ui 

a =>z  a. 
a c o o to  o 

z o — UJ 

=j _j  si-  oc  to 
o o-«<  uj  ^ 
a.  a:  i—  a.  51 
o c S5 
in  cvjtt:  a.  eg 


aBBBBl 


'4 


un  lUKQUE  PATTERN  WHEN  THE 


rmiimii 

jsiimimii 
I |!  liSHIIIIll 
■iimmii 
FiSiilillll  i 

j’liimmiafl 
mmumi  j 
I Tfimsiiiii  a 
^rismii  * 
r nmiim  i? 

LiSHIIIIll  [■ 
.mmmu  it 
|« -S5llil3!lll  1 
-H9K9I8III  lI 
’’lllllfilllll  ■! 

iilSSiiSSilSJ 

[Lri'l^S^V 

FisiiiiiiiUiiU 


lid 

he 

imui 

mu 

imig 

Sum 

mi 


min 

IHInl 

nun 

iiiiu 

a 

ft 

1 1 mil 
iiiiiil 

id 

urn 
mil 

I HM 

mu 

18 


mil 

imHmiiiiil 
pmiiiiiiiifiim 

pHIHHIlHIHimi 

miimuigiHUi 
mmiHiimiiiM 
1 11111111111111111 
iiliiimumim 
immiiiiiiiiiii 
imimmimm 


111 


1111 


■iiiiiiuiifiiiimi 
1 mHiHummu! 
miiiiuimmiHM 
iiimmimmm 
■imHimmiiiiri 

UIHSH^mUIIIIIIIUlHHIHI 

i.^"’""!mUUHHHHUHIIII 

imHii^mmiHmiHimiiuj 
|umHiumim~<iiiiiiiiinfli 


BPSiliiiimy 

Riiu^iiiiiiiii 

|K^3lll||ll9 

muimiimm 

iffillliilldliril 

wsmm 


- - - 


III 
■mill 


MICROCOPY  RESOLUTION  TEST  CHAflT 

NATIONAL  BUREAU  Of  STANDARDS -1963 -f 

1 


*$*b*MT*\ it 


DYNAMOMETER  METHOD  TO  DETERMINE  RELIABILITY  AND 
RESIDUAL  LIFE  OF  GAS-SPIN- BEARING  INSTRUMENTS 


Summary 

A dynamometer  method  is  described  by  which  the  coastdown  torque -speed 
characteristics  of  a gas- spin  bearing  are  accurately  measured  to  provide 
information  on  the  condition  of  the  bearing. 

This  method  provides  a means  by  which  variation  in  torque  about  the 
spin  axis  of  a bearing  is  accurately  measured  and  recorded.  By  comparing 
the  torque  and  rotor  speed  with  respect  to  time  during  a coastdown,  selected 
bearing  performance  parameters  can  be  used  to  determine  the  condition  of  the 
bearing  and,  hence,  its  reliability  and  residual  life.  In  practice,  it  is 
found  that  the  lower  speed  region  just  prior  to  and  during  setdown  provides 
the  most  accurate  indication  on  the  condition  of  a bearing. 

The  method  can  be  used  at  the  wheel -build  stage  through  to  final  assembly 
for  screening  and  diagnostic  purposes  and  for  bearing  development.  The 
instrument  described  has  been  used  successfully  for  evaluating  both  single-  and 
two-degree-of-freedom-gyro  bearings  at  both  the  wheel -assembly  and  top-assembly 
stages.  It  has  proven  to  be  consistently  reliable  in  evaluating  the  condition 
of  gas-spin  bearings  based  on  the  subsequent  diagnostic  disassembly  of  these 
bearings  and  has  become  an  invaluable  tool  to  help  improve  bearing  reliability. 

Introduction 

Slide  1 defines  the  basis  on  which  the  dynamometer  test  constitutes  an 
integral  part  of  the  process  for  determining  reliability  or  residual  life  of  a 
bearing.  Although  emphasis  is  placed  on  the  evaluation  of  gas-spin  bearings, 
any  other  type  of  precision  bearing  can  be  tested  in  this  manner. 
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Slide  2 shows  that  contamination  or  scoring  in  a bearing  will  cause 
asperities  to  protrude  from  the  bearing  surface  so  that,  as  the  rotating 
element  or  rotor  gradually  approaches  the  stationary  element  during  coastdown, 
spurious  torques  in  addition  to  the  viscous  torque  will  occur  the  moment  the 
rotating  element  touches  the  asperities.  The  dynamometer  senses  these  torques 
and  displays  them,  together  with  the  rotor  speed,  with  respect  to  time. 

Description  of  Dynamometer 

The  dynamometer , Slides  3,  10,  and  11,  consists  of  a large  circular 
gimbal  supported  by  two  diametrically  opposed  hydrostatic  gas  bearings,  together 
with  associated  pickoff  electronics  and  torquers  required  to  cage  the  gimbal  and 
to  provide  a sensitive  chart  recording  of  the  gimbal  caging  torque.  Supporting 
electronics  are  not  shown  in  these  slides. 

The  gas-bearing  wheel  assembly,  or  the  complete  instrument  to  be  evaluated, 
is  mounted  in  the  gimbal  with  the  spin  axis,  or  a component  of  it,  alined  with 
the  dynamometer  output  axis.  Electronics  to  power  the  gyro  spin  motor  and  to 
provide  a chart  recording  of  the  rotor  speed  during  coastdown  are  included.  A 
self-generating  or  external  means  of  measuring  wheel  speed  is  used.  Electrical 
connections  to  the  wheel  are  made  through  flex  leads  between  the  gimbal  and  a 
fixed  element. 

In  Slide  12,  a TGG  (Third -Generation  Gyro)  wheel  assembled  in  a test 
housing  is  shown  mounted  in  the  dynamometer  and  under  test.  The  dynamometer  is 
operated  at  room  temperature  inside  a draft  shield  and  mounted  on  a granite 
stand.  It  can  be  mounted  in  a vertical  or  horizontal  mode.  Damping  of  the  system 
is  achieved  electrically  and  the  frequency  response  is  up  to  approximately  10  Hz. 
To  reduce  the  back  EMF  drag  torque  during  coastdown,  the  rotor  is  initially 
demagnetized  by  wiping  down  automatically  by  capacitive  means. 


Evaluation  and  Interpretation  of  Dynamometer  Test  Data 

Slide  4 shows  the  typical  speed  and  torque  characteristics  obtained  with 
a new,  clean  bearing.  The  caging  torque  is  a measure  of  the  viscous  torque 
between  the  rotor  and  the  stationary  part  of  the  bearing  when  the  rotor  is 
gas-borne.  As  the  rotor  slows  down,  the  lift  of  the  bearing  decreases  along 
with  the  drag  torque  until  transition  from  viscous  to  sliding  friction  occurs. 

At  the  same  time,  the  exponential  speed  curve  goes  through  a point  of  inflection. 
The  transition  from  gas-borne  to  sliding  is  chacterized  by  a low-noise,  smoothly 
curving  torque  trace  reaching  a maximum,  then  returning  to  zero  with  the  rotor 
at  rest.  When  the  bearing  is  contaminated  or  scored,  the  torque  trace  is 
characterized  by  noisy,  spurious,  and  abrupt  changes  in  torque  which,  if  large 
enough,  will  cause  significant  changes  in  the  wheel-speed  slope.  These  tests 
are  frequently  conducted  with  spin  axis  vertical  or  along  the  axis  of  least 
load  capacity,  since  this  will  tend  to  accentuate  the  conditions  of  bearing 
wear. 


By  having  a knowledge  of  the  bearing  wheel  speed/bearing  lift  characteristics, 
obtained  experimentally  or  analytically,  Slide  5,  the  speed  at  which  a torque 
disturbance  occurs  can  be  related  directly  to  the  apparent  height  of  the 
asperities  in  the  bearing.  The  true  height  of  the  asperities  can  only  be  deduced 
by  inference,  since  this  will  depend  on  the  geometry  of  the  bearing  and  the 
direction  of  lift. 

From  the  torque  and  speed  readings,  Slide  6,  the  first  indication  of  a 
torque  disturbance,  deceleration  at  setdown,  coastdown  time  between  selected 
speeds,  minimum  torque,  speed  at  minimum  torque,  power,  drag  coefficient,  and 
other  related  parameters  can  be  readily  measured  or  calculated.  The  first 
indication  of  a torque  disturbance  is  of  prime  interest,  since  this  represents 
the  first  positive  indication  of  bearing  degradation.  The  height  of  an  asperity 
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or  minimum  bearing  gap  at  which  a torque  disturbance  takes  place  is  equivalent 
to  a particular  acceleration.  Thus,  under  a launch  acceleration  situation, 
due  to  compliance  of  the  bearing,  erratic  torques  can  be  exerted  on  the  rotor 
during  flight  if  debris  peaks  are  within  the  deflection  range  of  the  rotor.  It 
is  therefore  important  that  the  start -stop  wear  rate,  and  the  rate  at  which 
debris  builds  up,  should  be  sufficiently  low  that  the  accumulation  through  the 
instrument  and  system  checkout,  up  to  the  time  of  field  operation,  will  still 
allow  a margin  of  safety  with  respect  to  the  launch  deflection  of  the  rotor. 

Torque  resolution  of  the  dynamometer  depends  to  a great  extent  on  the 
overall  weight  of  the  gimbal,  wheel  assembly,  and  mounting  fixture,  since  this 
will  affect  the  clearance  in  the  hydrostatic  bearings  with  its  attendant  turbine 
torque  effects  which  appear  as  noise  in  the  torque  trace.  Under  minimal  load 
conditions,  a resolution  of  approximately  10  dyne-cm  is  normally  obtained. 

Slide  7 shows  the  speed-torque  characteristics  of  a contaminated  Autonetics 
G6B4  gyro,  with  spin  axis  vertical.  The  first  occurrence  of  torque  disturbance 
corresponds  to  asperities  measuring  at  least  140  microinches  in  height.  Since 
the  gyro  incorporates  a two-degree-of-freedom  spherical  bearing,  the  cause  of 
the  spurious  torque  could  be  due  to  contamination  located  near  the  bearing  poles, 
i.e.,  close  to  the  vertical  spin  axis,  or  closer  to  the  equator,  in  which  case 
the  asperities  would  be  greater  than  140  microinches.  The  gyro  was  subsequently 
diagnostically  disassembled.  Slide  8 shows  the  contamination  found  in  one  of 
the  two  hemispherical  cavities  in  the  region  of  a pad  area.  Slide  9 shows  the 
contamination  found  on  the  nonrotating  ball,  close  to  the  equator. 

With  experience,  predictions  can  be  made  with  some  accuracy  on  the  condition 
of  a bearing  in  terms  of  contamination,  surface  finish  or  scoring,  and  the 
location  of  the  resultant  asperities.  The  method  allows  very  small  spurious 
torques  to  be  detected  and  recorded,  too  small  to  affect  the  speed  trace,  but 
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of  considerable  significance  when  evaluating  the  reliability  and  residual 
life  of  a bearing. 


Conclusions 


Experience  to  date  has  shown  the  dynamometer  to  be  consistently  reliable 
for  evaluating  bearing  condition  in  different  instruments,  Slide  12.  It  has 
shown  that  where  contamination  or  scoring  of  the  bearing  surfaces  was  indicated, 
subsequent  disassembly  of  the  bearing  has  confirmed  this.  For  design  purposes, 
it  has  been  of  considerable  use  for  comparing  bearing  surfaces  with  different 
boundary  lubricants,  bearing  geometry,  and  surface  finish.  As  a screening  tool, 
it  has  helped  isolate  the  cause  for  poor  instrument  performance  and  establish 
the  means  of  predicting  the  residual  life  of  a gas-spin  bearing.  Slide  13 
summarizes  these  capabilities. 
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Use  of  PTFIS  (or  equivalent)  as  a research  tool  should  lead  to  a better  understanding 
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DAVE  KASPER 

Mr  Kasper  has  been  associated  with  the  Aerospace  Guidance  and  Metrology 
Center  (AGMC),  Newark  Air  Force  Station,  Newark,  Ohio,  since  October 
1963.  He  was  first  employed  as  an  Electronic  Engineer  in  the  Quality 
Engineering  Branch.  He  was  then  promoted  to  the  head,  Gyro  Engineering 
Unit,  where  he  remained  until  1966  when  he  was  assigned  the  duties  of 
head,  Versatile  Automatic  Test  Equipment  Unit,  which  is  now  the  Automatic 
Test  Equipment  Division  of  the  Directorate  of  Service  Engineering.  Prior 
to  transferring  to  AGMC,  Mr  Kasper  was  employed  at  the  Naval  Weapons  Center, 
China  Lake,  California,  in  the  test  department  from  1954  to  1963.  While 
at  China  Lake,  he  held  various  management,  staff  engineering,  and  design 
engineering  positions. 
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NAVY  ACCEPTANCE  CRITERIA  FOR  ATE  TEST  PROGRAMS 
STAN  IAROSIS 

NAVAL  AIR  ENGINEERING  CENTER 
LAKEHURST,  NEW  JERSEY 

The  naval  Air  System  Command  specification,  AR-9B,  establishes 
the  requirements  for  the  development,  test,  documentation,  configuration 
management,  quality  assurance,  and  preparation  for  delivery  of  ATE  Test 
Program  Sets.  The  term  Test  Program  Set  or  TPS,  as  defined  in  AR-9B,  is 
a collective  term  which  groups  and  identifies  all  the  elements  required 
to  test  a unit  under  test  or  UUT  with  automatic  test  equipment.  These 
TPS  elements  are  defined  as: 

1.  The  Test  Program  Tape  which  contains  the  coded  sequence  which 
is  executed  by  the  ATE  computer. 

2.  The  Interconnection  Device  which  provides  the  electrical  and 
mechanical  compatibility  between  the  ATE  system  and  the  UUT. 

3.  The  Test  Program  Instruction  which  provides  ATE  operator  with 
instructions  for  preparing  the  UUT  for  testing,  connecting  the 
UUT  and  the  Interconnection  Device  to  the  ATE,  accomplishing 
the  as-programmed  test,  removing  the  UUT  and  the  Interconnection 
Device  from  the  ATE,  and  the  disposition  of  the  UUT. 

The  Navy's  acceptance  of  an  ATE  test  program  i ; dependent  on  the 
capability  of  the  TPS  to  successfully  perform  the  required  level  of  fault 
isolation  on  the  UUT  for  which  the  test  programs  were  written,  thereby 
demonstrating  the  integration  of  the  ATE  system,  TPS  elements,  and  the 
UUT.  Although  a formal  acceptance  test  procedure  is  conducted  for  each 
TPS,  the  acceptance  or  rejection  of  a TPS  is  determined  at  different 
milestones  in  the  TPS  design/development  cycle.  This  TPS  design/ 
development  cycle  is  depicted  in  figure  (1)  and  described  as  follows: 

1.  Phase  I tasks  involve: 

a.  The  contractor  generation  of  UUT  source  data  (schematics, 
assembly  drawings,  engineering  specifications,  and  test 
requirement,  documents)  with  Navy  approval  of  content  and 
format . 

b.  Navy  and  contractor  performance  of  support  equipment 
compatibility  studies. 

c.  Contractor  submission  of  support  equipment  recommendations 
to  the  Navy. 
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2.  Phase  II  begins  with  the  Navy  approval  of  the  support  equip- 
ment requirement  recommendation.  Assuming  that  the  support 
equipment  is  ATE,  phase  II  will  include: 

a.  Contractor  generation  of  program  design  data  with  Navy 
review  of  its  content  and  format.  This  program  design 
data  includes  the  following: 

(1)  A diagnostic  flow  chart  which  is  the  UUT  test  orient- 
ed flow  chart  representing  the  UUT  test  strategy 
being  implemented  on  the  ATE. 

(2)  A test  diagram  which  identifies  the  electrical  path 
between  the  UUT  and  ATE,  and  is  prepared  for  each 
test  or  group  of  tests. that  have  the  same  basic  test 
set  up. 

(3)  An  ATE  source  program  which  is  the  complete,  detailed 
programmed  description  of  each  step  in  the  testing 

of  a given  UUT  prepared  in  the  source  language.  It 
reflects  the  requirements  collectively  established  in 
the  diagonstic  flow  chart,  test  requirement  document, 
and  the  test  diagram. 

b.  Contractor  design,  development,  debug  and  integration 
of  the  TPS  elements  with  Navy  monitoring. 

c.  TPS  acceptance  test  performed  by  the  contractor  and  super- 
vised by  the  Navy. 

3.  Phase  III  is  the  delivery,  on-site  verification  and  up-dating/ 
revising  the  production  test  program  set. 

Specification  AR-9B  provides  for  government  engineering  personnel 
to  supplement  the  local  on-site  government  inspection  service,  i.e.  DCAS, 
NAVPRO,  AFPRO,  etc.  at  the  contractor's  plant  to  review  UUT  source  data, 
review  program  design  data,  monitor  Test  Program  Set  debug  and  integra- 
tion, and  review,  supervise  and  approve  the  acceptance  testing  for  each 
Test  Program  Set.  The  Naval  Air  Systems  Command  has  tasked  the  Naval 
Air  Engineering  Center  to  provide  this  engineering  assistance.  This 
engineering  team  reviews  all  the  supporting  data  to  assure  that  the 
TPS  meets  the  following  criteria: 

1.  Exercise  all  UUT  Functional  Inputs. 

2.  Exercise  all  distinct/unique  UUT  operating  Modes  but  avoid 
redundancies . 

3.  Evaluate  (i.e.,  detect  degradation)  all  UUT  functional  outputs 
including  BIT.  After  performance  routine  is  all  "go",  a 

BIT  test  should  be  performed  to  insure  BIT  good. 
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4.  Evaluate  only  those  UUT  Test  Points  that  monitor  UUT  function 
outputs  "not  directly"  measurable  by  ATE. 

5.  Detect  degradation  at  the  UUT  functional  (not  Test  Point) 
interface  of  any  UUT  operational  performance  having  an  impact 
upon  performance  of  a high  order  assembly/system  (i.e.  UUT).' 

6.  Minimize  UUT  set-up.  Test,  and  tear-down  times. 

7.  Include  automatic  branching  of  diagnostic  fault  isolation 
type  routines. 

8.  Minimize  legthy  time-delays  (perform  other  tests  during 
execution  of  time-delays) . 

9.  Minimize/Optimize  operator  action/ Intervention  provided 
same  is  deemed  to  be  "absolutely  necessary". 

10.  Provide  for  rapid  "visual"  evaluation  of  UUT  status  desplays, 
indicator  and  operation  of  UUT  Environmental  Functions. 

11.  Include  at  all  test  program  Entry  Points: 

a.  ID  Signature  Test  - verifying  under  program  control  the 
presence  of  resistances  inserted  into  the  ID  soley  for  this 
purpose. 

b.  UUT  Signature  Tests. 

c.  Safe-to-tum-on  test-detect  the  possibility  of  shorted  or 
open  lines  at  the  UUT  connector  that  may  damage  the  UUT, 

ID  or  ATE. 

d.  Power-Application  Sequence  (if  applicable) 

e.  ATE  reset  sequence  prior  to  and  upon  completion  of  UUT 
testing. 

12.  Be  as  short,  rapid  and  straight  forward  as  possible. 

13.  Stress  detection  of  faults  at  the  UUT  functional  Input/Output 
(rather  than  test  point)  Interface  i.e.  observe  UUT  outputs  to 
the  next  higher  level  Assembly. 

In  addition  the  performance  routine  of  the  TPS  shall  not: 

1.  Evaluate  test  points  peculiar  to  UUT  diagnostic  fault  isolation. 

2.  Rely  on  BIT 
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3.  Evaluate  UUT  power  supplies  (unless  critical  to  or  degrade  UUT 
outputs) . 

4.  Include  any  in  line  diagnostic  routines. 

5.  Include  verification  of  UUT  functionsl  input  signals  at  the  ATE 
interface. 

6.  Include  time  consuming  measurements. 

7.  Include  probing. 

8.  Include  in  line  repair  actions  other  than  adjust/align  types 
while  on-line  with  ATE  tracking. 

9.  Include  time  consuming  tracking,  power,  search,  maxima/minima 
type  measurements  unless  they  are  deemed  absolutely  essential 
to  UUT  performance  verification. 

10.  Include  time  consuming  operator  observations  during  on-line  ATE 
testing  for  evaluation  of  the  followint: 

a.  ATE  displays. 

b.  Complex  UUT  display  patterns  and  indications  (i.e.  unless 
same  are  deemed  absolutely  essential  to  UUT  performance 
verification. 

This  effort  by  the  Naval  Air  Engineering  Center  assures  with  some 
confidence  that  the  TPS  has  been  designed  in  accordance  with  AR-9B  and 
that  it  is  ready  for  acceptance  testing.  The  objective  of  the  acceptance 
test  is  to  demonstrate  to  the  Navy  the  fault  detection  and  isolation 
capabilities  of  the  TPS  by  insertion  of  faults  in  the  UUT.  A sampling 
plan  is  used  to  "rove  the  acceptability  of  the  TPS.  The  parameters 


for 

this  plan  are: 

1. 

An  acceptable  quality  level  of  2.5% 

2. 

A limiting  quality  of  13.0% 

3. 

Customers  Risk  and  Producers  Risk  varying  from 
ing  to  the  contracted  MTBMA  (Mean  Time  Between 
Actions)  for  the  UUTs  to  which  the  TPS  applies. 

1%  to  25%  accord- 
Maintenance 
See  Figure  2. 

These  parameter  values  are  used  to  develop  a chart  for  each  TPS. 
This  chart  and  the  formulas  to  develop  the  chart  is  shown  in  Figure  3; 
Utilizing  a completed  chart,  a running  graph  of  faults  inserted  versus 
defects  is  kept  and  a Navy  decision  is  made  to  accept  or  reject  the  TPS 
depending  on  whether  the  plot  tends  into  the  accept  or  reject  region. 
The  decision  can  be  made  at  any  time  after  the  minimum  number  of  faults 
have  been  inserted,  but  can  be  deferred  until  the  maximum  number  of 
faults  have  been  inserted  and  the  results  recorded.  The  maximum  number 
of  faults  is  1.5  times  the  minimum  which  in  turn  is  defined  by  the 


1 


integer  number  greater  than 

The  faults  inserted  are  selected  by  the  Navy.  The  contractor,  how- 
ever, provides  the  Navy  with  a list  of  faults  from  which  are  selected 
the  candidate  faults.  An  example  of  a contractor  fault  sample  selection 
list  is  shown  in  Figure  4.  The  Navy  selects  the  faults  randomly  from 
this  list.  After  the  faults  are  selected,  the  contractor  and  the 
Navy  review  the  candidates  and  exclude  those  faults  that  cannot  be  simulated 
at  the  piece  part  level,  will  not  be  reflected  at  the  UUT  interface  or 
will  damage  the  UUT.  If  after  the  above  review,  the  list  of  faults  does 
not  equal  the  required  number,  additional  faults  will  be  selected  and 
reviewed  until  the  number  equals  or  exceeds  the  maximum  number  of  faults 
to  be  inserted. 

Following  a successful  acceptance  test,  the  Naval  Air  Engineering 
Center  Representative  recommends  acceptance  of  the  TPS  by  the  local 
government  on-site  inspection  service. 
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MICROPROGRAMMING:  WHAT  AND  WHY? 


The  term  "microprogramming''  has  been  used  a lot  - perhaps  overused  - 
in  the  past  few  years.  Listening  to  some  speakers,  reading  some  articles, 
one  could  get  the  impression  that  it  will  revolutionize  computers,  and  that 
anyone  not  expert  in  it  is  hopelessly  out  of  date.  This  just  is  not  so. 

In  this  paper,  we  will  bring  microprogramming  down  to  earth.  We  will  show 
that  it's  just  another  computer  design  tool,  though  an  important  one,  with 
its  plusses  and  minuses.  Last,  we  will  discuss  what  some  of  these  plusses 
and  minuses  are,  and  how  they  might  impact  ATE. 

Let's  look  at  how  a computer's  central  processor  might  be  organized. 

A simplified  block  diagram  is  shown  in  Figure  1.  The  instruction  register  is 
loaded  with  an  instruction  from  a memory  location  given  by  the  program  counter. 
Based  on  the  instruction,  control  logic  then  drives  the  memory  and  the  ALU  in 
executing  the  instruction.  (Various  paths,  not  shown,  lead  back  to  the  pro- 
gram counter  to  permit  branching.)  After  the  instruction  is  executed,  the 
next  one  is  fetched,  and  the  cycle  repeats. 

Each  instruction  involves  many  internal  steps.  Consider  what  must  be 
done  to  carry  out  an  "add"  instruction  in  a simple  minicomputer: 

1.  Obtain  the  instruction  from  memory. 

2.  Put  the  instruction  address  field  in  an  address  register. 

3.  If  the  instruction  "index  bit"  is  1,  add  the  contents  of  the  index 
register  to  the  address  register. 

4.  If  the  instruction  "indirect  bit"  is  1,  use  the  address  register 

to  obtain  a memory  word  and  place  that  word  in  the  address  register. 

5.  Use  the  address  register  to  obtain  a memory  word  and  place  that 
word  in  one  adder  input  register. 

6.  Place  the  contents  of  the  accumulator  in  the  other  adder  input 
register. 

7.  Place  the  contents  of  the  adder  output  register  into  the  accumulator. 

8.  If  a carry  occured,  set  the  carry  bit. 

9.  If  overflow  occured,  set  the  overflow  bit;  then 

if  overflow  traps  were  not  masked,  cause  an  overflow  trap. 

10.  Repeat  by  fetching  the  next  instruction. 

This  is  for  a simple  instruction  on  a simple  computer.  We  can  complicate 
matters  by  considering,  say,  a floating-point  operation,  or  by  enhancing  the 
machine  with  multiple  index  registers,  multiple  accumulators,  base  registers, 
relocation...  and  the  logic  needed  to  control  moving  data  around  the  machine, 
controlling  conditional  activities,  etc.,  becomes  very  complicated.  This 
logic  is  hard  to  design,  is  prone  to  obscure  errors,  and  is  devilish  to  check 
out.  Is  there  a better  way? 

One  answer  to  this  question  is  "microprogramming."  The  term  was  first 
used  by  Maurice  Wilkes  of  Cambridge  U.  in  England  in  1951.  ?n  fact,  he  called 
his  paper  "The  Best  Way  to  Design  an  Automatic  Calculating  Machine.’  His  con- 
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ceptawas  to  regularize  the  control  logic  by  designing,  in  effect,  a bare- 
bones  computer  inside  the  user  visible  computer.  The  instructions  of  this 
computer  were  called  "microinstructions,"  which  combined  to  form  a "micro- 
program." Each  bit  of  a microinstruction  controlled  a gate  or  gates  in 
the  ALU  directly.  Wilkes’  scheme  virtually  eliminated  the  need  for  special- 
ized control  logic:  the  user-visible  computer  didn't  need  it,  because  the 

microprogram  took  its  place;  the  inner  computer  didn't  need  much,  because 
it  was  very  simple  and  was  designed  purely  for  ALU  control. 

Microprogramming  was  little  used  in  practice  for  many  years.  As 
technology  evolved,  though,  the  necessary  components  (especially  fast  storage 
for  the  microprogram)  became  more  economical  than  control  logic.  Growing 
complexity  of  instruction  sets  helped  this  trend.  By  the  late  1960 's, 
microprogramming  was  accepted  as  a commercially  viable  way  to  design  the 
control  function  of  a computer.  Today,  the  majority  of  new  svstems  use  this 
method . 

At  this  point  we  should  separate  "microprogramming"  from  "r coprocessors." 
A microprocessor,  in  today's  sense,  is  an  LSI*  chip  (or  a small  set  o;  LSI  chips) 
that  form(s)  the  logic  portion  of  a small  computer.  A microprocessor  might 
happen  to  be  microprogrammed  - the  pros  and  cons  of  microprogramming  t 3 id 
there  as  well  as  for  other  types  of  processor  - but  it  doesn ' t I ve  t be. 

The  confusion  arises,  first,  because  the  terms  are  so  similar  (;;-:d  i:  ’ u 
late  to  change  either  one;)  and,  second,  because  some  people  used  the  term 
"microprocessor"  to  mean  "the  inner  computer  that  executes  the  microprograms" 
before  modern  LSI  microprocessors  came  into  being.  It  s important  to  keep 
these  terms  straight. 

Another  term  we  should  define  is  "firmware."  This  term  was  coined 
by  Ascher  Gpler  to  refer  to  microorograms  because  they  stand  between  the 
uardware  and  the  software.  Just  as  the  set  of  physical  elements  which  form  a 
machine  are  its  "hardware"  and  the  set  of  programs  it  executes  are  its  "soft- 
ware," the  set  of  microprograms  that  control  a computer  are  its  "firmware." 
Firmware,  then,  means  microprograms. 

Now  that  we've  defined  our  terms,  what  are  some  of  the  pros  and  cons  of 
microprogramming  (or  firmware)? 

Advantages: 

* Ease  of  design.  A complex  instruction  set  c&n  be  implemented  and 
checked  out  more  easily  than  with  hard-wired  control  logic. 

* Ease  of  changes.  Since  the  meaning  of  each  instruction  is  defined 
by  a program,  this  program  can  be  changed. 

* Ease  of  extensions.  If  the  design  of  a computer  allows  for  it, 
microprograms  can  be  added  to  perform  functions  that  the  original 
designers  did  not  include.  This  capability  can  specialize  the  instruc- 
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*La  gj  Scale  Integration.  Refers  to  semiconductor  technology  chat  permits 
combining  hundreds  of  logic  elements  in  a component  typically  a few  mm  square. 


tion  set  for  a particular  class  of  applications.  It  can  also  be 
used  to  make  one  machine  run  programs  written  for  (or  "emulate") 
another  machine,  though  performance  will  be  poor  if  the  machines 
are  not  quite  similar. 

• Ease  of  diagnosis.  The  microprogram  interacts  directly  with  the 
ALU,  not  through  complex  control  logic.  It  is  possible  to  write 
diagnostic  microprograms  that  can  run  when  the  ALU  has  failed 
(and  software  couldn't  run),  and  can  localize  a failure  more 
effectively  than  software  could. 

Disadvantages : 

• Performance.  Microprogrammed  machines  are  usually  slower  than  a 
compatible  system,  using  hard-wired  control  logic  and  the  same 
technology,  would  be.  This  is  usually  important  only  when  the  fastest 
available  technology  is  used.  Below  this  point,  it  is  usually  more 
economical  to  improve  performance  by  other  means  while  staying  with 

a microprogrammed  design. 

• Cost  for  simple  instruction  sets.  If  a computer  has  a very  simple 
instruction  set,  it  is  still  economical  to  use  hard-wired  control 
logic. 

What  is  the  impact  of  microprogramming  on  ATE?  There  should  be  little 
or  no  direct  impact.  The  ATE  manufacturer  embeds  a minicomputer  in  an 
ATE  system  in  the  same  way,  regardless  of  whether  that  mini  is  or  is  not 
microprogrammed.  The  difference  will  be  hidden  from  the  ATE  user.  There 
is  an  indirect  impact,  though,  in  the  following  ways: 

• The  benefits  of  more  cost-effective  minicomputers  are  passed  on  to 
ATE  users. 

• Microdiagnostics  can  result  in  more  reliable  ATE. 

• Custom  microprogramming  can  provide  specialized  instruction  sets  to 
give  simpler,  faster  and  more  compact  ATE  software. 

Microprogramming  is  a major  design  feature  of  the  computer  in  ATE. 

Its  indirect  impact  on  ATE  users  can  be  significant.  An  informed  ATE  user 
should  be  aware  of  microprogramming:  what  it  is,  and  what  it  isn't;  what 

it  can  do,  and  what  it  can't. 
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The  reader  who  wants  to  delve  further  into  microprogramming  can  investigate 
the  following  sources: 

1.  Books.  Two  textbooks  devoted  largely  to  microprogramming  have  been  published, 

they  are  Microprogramming:  Principles  and  Practice,  S.  S.  Husson  (Prentice-Hall, 

1970)  and  Computer  Organization  and  Microprogramming,  Y.  Chu  (Prentice-Hall,  1972.) 
A number  of  papers  on  different  aspects  of  the  field  are  collected,  and  related 

to  each  other  by  the  editors,  in  Infotech's  State-of-the-Art  Report  on  Micro- 
programming and  System  Architecture  (Infotech  Ltd.,  Berkshire,  U.K.,  1974.) 

2.  CS  Overviews.  Computing  Surveys  (CS)  is  the  survey  and  tutorial  journal 

of  the  Association  for  Computing  Machinery  (ACM.)  It  has  published  two  papers 
on  microprogramming:  "The  Growth  of  Intsrest  in  Microprogramming:  A 

Literature  Survey,"  M.  V.  Wilkes,  vol.  1,  no.  3 (September  1969),  and  "Contem- 
porary Concepts  of  Microprogramming  and  Emulation,"  R.  E.  Rosin,  vol.  1, 

no.  4 (Dec.  1969).  This  last  paper  will  give  you  some  of  the  flavor  of 
microprogramming  a real  machine  without  all  the  pain. 

3.  Special  journal  issues.  All  the  professional  journals  have,  on  occasion, 
published  articles  on  microprogramming.  For  the  browser,  however,  it  is 
inconvenient  to  find  them.  Five  journal  issues  have  unusually  high  concen- 
trations of  microprogramming  articles  and  should  be  easy  to  find.  The 
earliest  is  the  February  1964  issue  of  Datamation,  worth  reading  today  only 
for  historical  perspective.  Next  is  the  December  1965  issue  of  Communications 
of  the  ACM,  which  contains  a number  of  articles  on  "emulation"  - using 
microprogramming  to  enable  one  computer  to  execute  programs  originally  written 
for  another.  Both  more  recent  and  more  technical  are  the  July  1971  and 
August  1974  issues  of  the  IEEE  Transactions  on  Computers , devoted  entirely 

to  microprogramming.  The  most  recent  special  issue  on  microprogramming  is  the 
August  1975  issue  of  Computer,  also  published  by  the  IEEE. 

4.  ACM  SIGMICRO.  The  ACM’s  Special  Interest  Group  on  Microprogramming 
(SIGMICRO)  publishes  a quarterly  newsletter  (SIGMICRO  Newsletter)  containing 
reports  of  current  research,  conference  summaries,  press  releases  about 
microprogrammable  computers,  and  the  like.  This  newsletter  also  carries  the 
most  complete  bibliographies  available  in  the  field.  The  issue  appearing  each 
July  carries  a bibliography  for  the  preceding  year,  prepared  by  Dr.  Louise 
Jones,  and  the  September  1974  issue  was  devoted  entirely  to  a combined 
bibliography  going  back  to  1951.  This  group  also  co-sponsors  annual  workshops 
on  microprogramming  with  the  IEEE  Computer  Society.  Proceedings  or  Preprints 
are  available  for  most  of  them.  (The  papers  in  the  two  IEEETC  issues  mentioned 
in  the  previous  paragraph  are  taken  primarily  from  the  third  and  sixth  work- 
shops, respectively.) 
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FIGURE  1 


ORGANIZATION  OF  A NON~MI CROPROGRAMMED  COMPUTER 


MEMORY 

MANUFACTURING  TEST  REQUIREMENTS 
VERSUS 

REPAIR  TEST  REQUIREMENTS 
SOFTWARE  IMPACT 

SUMMARY 

Factory  production  test  programs  for  navigation  systems  are  written  to  verify 
functional  capabilities  of  the  product  at  various  levels  of  the  assembly  process. 
Limited  fault  isolation  routines  are  required  due  to  this  step-by-step  method  which 
reduces  probability  of  failure  at  final  assembly.  A different  approach  is  required  at 
the  depot  since  the  situation  is  reversed.  Systems  are  returned  to  the  depot  because 
of  a field  failure  and  the  fault  must  now  be  verified  and  the  failed  unit  or  part  iden- 
tified. It  is  essential  that  depot  test  programs  include  fault  isolation  routines  to 
reduce  system  turnaround  time  and  reduce  maintenance  costs.  If  the  initial  factory 
lest  programs  are  properly  modularized  so  existing  subroutines  can  be  linked  with 
new  fault  isolation  routines,  then  a substantial  savings  in  cost  and  time  can  be 
achieved  in  providing  the  required  programs  to  the  depot.  1'his  method  \ as  used  to 
provide  MAI.VIR  (Malfunction  Verification  Isolation  Requirements)  programs  to 
Newark  Air  Force  Station  (NAFS)  for  maintenance  of  Mitvteman  III  navigation 
systems. 

INTRODUCTION 

This  paper  discusses  the  basic  differences  in  test  requirements  for  manufactur- 
ing and  depot  testing  of  navigation  systems  and  describes  the  software  methods 
developed  on  the  Minutcman  III  test  progrants  to  satisfy  these  requirements. 

Since  performance  of  functional  tests  is  a requirement  for  both  the  depot  and 
the  manufacturer,  the  major  differences  in  requirements  exist  in  the  area  of  diagnos- 
tic routines  and  system  burn-in  tests.  Manufacturing  test  requirements  for  naviga- 
tion systems  are  usually  written  with  emphasis  on  functional  testing  with  limited 
diagnostic  test  routines.  K.xtensive  system  diagnostics  are  not  required  in  the  pro- 
duction phase  partially  because  of  the  extent  of  lower  level  testing  (module,  instru- 
ment, subsystem)  which  reduces  NtMiO's  at  system  level  where  fault  isolation  is 
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more  difficult  and  the  availability  of  an  experienced  engineering  staff  to  support 
manufacturing  test  operations  when  a fault  occurs  at  the  system  level. 


The  test  situation  is  reversed  at  the  depot  where  the  system  is  tested  to  verify 
(or  identify)  the  field  fault  and  isolate  the  faulty  part.  Diagnostic  routines  in  this 
situation  are  essential  to  reduce  system  turn-around  time  which  results  ;n  reduced 
maintenance  costs  because  fewer  spare  systems  and  test  stations  are  required  to  sup- 


port the  program. 


In  the  production  phase  performance  testing  occurs  at  system  level  as  a result 
of  system  burn-in  requirements.  To  minimize  system  turn-around  time  at  the  depot, 
the  emphasis  is  placed  on  performance  of  subsystem  level  tests.  This  philosophy  aids 
the  depot  in  effecting  quick  turn-around  of  systems  by  substitution  of  previously  tested 
subsystems  and  the  performance  of  a relatively  brief  system  functional  test. 


While  differences  in  test  requirements  may  exist,  a significant  reduction  in 
software  cost  can  be  achieved  if  the  factory  and  depot  test  equipment  are  essentially 
the  same  and  the  factory  software  is  developed  in  modular  form.  If  these  conditions 
exist,  then  common  executive  and  lest  equipment  self-test  programs  can  be  utilized. 
In  addition,  if  the  factory  functional  Lest  programs  are  developed  as  a series  of  sub- 
routines to  perform  specific  functions  (platform  slewing,  platform  leveling,  system 
initialization,  etc),  then  these  routines  can  be  linked  with  new'  routines  to  form 
diagnostic  or  functional  test  routines  for  the  depot. 


MIN  UTKMAN  III  TKST  SOFTWARK  DKSCRI PTION 


The  Minuteman  III  program  utilizes  the  concept  outlined  above.  Common  test 
equipment  is  used  at  the  factory  and  depot  employing  the  same  Kxecutive  program. 

(A  description  of  the  Kxecutive  software  and  lest  equipment  developed  by  Rockwell 
International  for  the  Minuteman  III  programs  is  presented  in  Appendix  A.  ) Minute- 
man  III  test  programs  are  divided  into  a set  of  test  sequences  which  must  be  performed 
to  satisfy  total  test  requirements  (e.g.  , the  Missile  Guidance  Set  (MGS)  has  a Per- 
formance Test  Sequence  and  Functional  Test  Sequence).  As  shown  in  Figure  1,  each 
sequence  is  further  divided  into  modes.  Kach  mode  consists  of  subtests  which  must 
be  performed  to  satisfy  that  mode.  Kach  subtest  is  programmed  at  the  subroutine 
level.  Commonly  used  funcliojis  such  as  measurement  data  conversion,  test 
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Figure  1.  Sequence,  Mode,  Subroutine  Relationship 


equipment  mode  selection,  limit  cheeks,  slowing,  etc,  are  programmed  as 
subroutines  callable  by  the  lest  modes.  Figure  1 illustrates  how  these  subroutines 
are  repeatedly  used  along  with  other  subroutines  to  form  different  test  modes.  Pro- 
gramming at  the  subroutine  level  permits  one  to  easily  make  corrections,  to  incorpo- 
rate diagnostics  and  to  respond  to  hardware  and  operational  software  design  changes 
with  a new  or  revised  program.  Revising  a single  subroutine  shared  by  many  modes 
is  obviously  easier  to  accomplish  than  if  the  function  is  imbedded  in  each  mode. 

Kach  test  program  has  a test  program  sequencer  which  is  loaded  into  core  and 
controls  the  sequencing  of  the  test  according  to  operator  command  inputs.  The 
sequencer  cycles  through  requested  subtests  or  modes  as  follows:  the  first  subtest 
or  mode  is  loaded  into  core  memory,  executed,  and  then  released  upon  successful  com- 
pletion: the  second  subtest  or  mode  is  loaded  into  core,  executed,  and  then  released  upon 
successful  completion;  all  subsequent  subtests  or  modes  are  handled  similarly. 

The  operator  may  request  the  sequencer  to  automatically  execute  an  entire 
sequence,  a specific  mode,  or  a stack  of  eight  modes  to  be  executed  as  a group.  The 
sequencer  will  verify  that  all  prerequisites  for  each  selected  mode  have  been  executed. 

If  all  prerequisites  have  not  been  met,  then  the  program  sequencer  wi  11  cause  the 
execution  of  those  modes  which  will  satisfy  these  prerequisites  and  then  execute  the 
selected  mode. 

The  advantages  of  modularized  functional  test  software  for  the  Minuteman  III 
test  operation  was  demonstrated  in  the  creation  of  the  MALVIR  program  for  the  depot. 

M A I .VI R PKtXIRAM  OBJ  FCTIVKS  AN  I)  UKVKLOPM KNT 

The  goal  of  the  MALVIR  effort  for  the  depot  was  to  provide  an  essentially 
automatic  means  of  isolating  the  majority  of  MGS  failures  in  an  optimal  manner  in 
terms  of  time  and  manpower  required.  For  those  failures  not  easily  isolated  or  of  an 
intermittent  nature,  automated  routines  were  provided  as  tools  to  aid  depot  personnel 
in  the  fault  isolation  process. 

Prior  to  development  of  MALVIR  programs,  Minuteman  III  1)M(!F  and  functional 
lest  software  had  been  delivered  to  NAFS  depot  and  became  operational  on  1 July  1 5)70 . 
Development  of  the  MALVIR  programs  was  accomplished  in  two  phases.  Phase  One 
was  completed  on  24  November  15)71,  and  Phase  Two  was  completed  on  31  July  15)72. 


MALVIR  Development  - Phase  One 


The  purpose  of  a Phase  I MALVIR  Program  was  to  provide  an  early  diagnostic 
capability  to  the  depot  utilizing  manually  selected  test  modes  to  isolate  faults.  Auto- 
matic fault  isolation  procedures  were  supplied  at  a later  date  in  Phase  II  MALVIR. 
Figure  2 is  a flow  chart  of  Phase  I MALVIR  operations. 

Phase  I MALVIR  program  supplied  information  and  options  a skilled  technician 
could  utilize  to  more  efficiently  isolate  the  cause  of  specific  NO-GO's.  lest  routines 
were  built  to  aid  the  investigation  of  elusive  or  intermittent  failures.  The  data  and 
options  provided  in  MALVIR  Phase  I were  used  in  building  Phase  II  test  sequences 
which  were  designed  to  isolate  the  cause  of  a NO-GO  to  a specific  component. 

An  example  of  the  use  of  existing  functional  test  modes  to  build  diagnostic 
sequences  for  Phase  I and  Phase  II  MALVIR  is  shown  in  Figure  3.  As  shown  in  fig- 
ure 3.  Phase  I.  primarily,  consisted  of  a manually  selected  sequence  of  functional 
test  modes  plus  some  Phase  I diagnostics  to  provide  the  operator  with  additional 
information  regarding  the  failure  (in  the  example  shown,  a platform  slew  timer 
diagnostic). 

MALVIR  Development  - Phase  Two 

MALVIR  programs  (Phase  II)  are  divided  into  two  sections.  Section  one  is  for 
the  isolation  of  faults  indicated  by  NO-GO's  received  during  depot  functional  testing. 
Section  two  is  for  the  isolation  and  verification  of  the  field  indicated  faults.  The 
diagnosis  of  field  faults  and  depot  faults  are  closely  related  since  almost  all  field 
faults  can  be  traced  to  depot  NO-GO's.  The  major  difference  between  these  two 
sections  is  that  for  field  faults,  ii  may  be  necessary  for  the  technician  to  enter  data  to 
the  test  computer  from  the  field  failure  report  if  the  data  is  not  retrievable  from  the 
AVE  computer.  Otherwise,  the  field  fault  analysis  starts  by  determining  the  exact 
failure  which  occurred  in  the  field  from  analysis  of  the  data  stored  in  the  AVE  computer 
(D37D).  A flow  chart  of  the  Phase  II  MALVIR  operations  is  shown  in  Figure  4. 
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Figure  2.  Flow  Chart  of  MALVIR  Operations  Phase  I (Sheet  1 of  2) 
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Figure  :i.  Comparison  of  Phase  I and  Phase  II  MALVIR  Sequences  For  Verifying  A 
Platform  Slew  Timer  Runout  Field  Failure  (Sheet  1 of  f>) 
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Figure  3.  Comparison  of  Phase  I and  Phase  II  MALVIR  Sequences  For  Verifying  A 
Platform  Slew  Timer  Runout  Field  Failure  (Sheet  2 of  5) 
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Comparison  of  Phase  I and  Phase  II  MALVIR  Sequences  for  Verifying  a 
Platform  Slew  Timer  Runout  Field  Failure  (Sheet  5 of  5) 
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Figure  I • Flow  Chari  for  MALVIK  Operations  Phase  II  (Sheet  1 of  li) 
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Figure  4 . Flow  Chart  for  MALVIli  Operations  Phase  IJ  (Sheet  2 of  '.!) 
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Figure  4.  Flow  Chart  for  MAIA'IR  Operations  Phase  II  (Sheet  3 of  3) 
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The  requi rements  for  Automatic  AVK  fault  isolation  were  keyed  to  reproduction 
of  the  event  sequence  which  produced  the  depot  functional  test  NO-GO  or  the  field 
fault  indication.  A diagnostic  mode  is  provided  for  each  depot  AVK  NO-GO  (or  group 
of  NO-tiO's)  and  each  field  fault  indicator  (or  group  of  indicators).  These  modes  con- 
sist of  a series  of  decision  making  steps,  and  the  results  of  each  step  determine  what 
the  next  step  in  the  series  will  he.  These  modes  were  developed  using  a building 
block  theory  of  fault  isolation.  That  is  to  say,  that  each  subsequent  step  is  based  on 
the  premise  that  the  previous  steps  produced  reliable  results. 

As  shown  in  Figure  ti.  Phase  II  MAIA'IR  automated  the  diagnostic  process  by 
means  of  the  Field  Kvaluation  Mode  (7!))  and  the  AV  K Computer  Memory  Data  Retrieval 
Mode  (lat!)  plus  additional  diagnostic  routines.  Mode  ltj.'l  was  used  to  retrieve  field 
failure  data  from  the  computer  memory  and  Mode  7!)  selects  a diagnostic  sequence 
based  on  the  failure  data.  Kxisting  functional  test  modes  were  utilized  to  reproduce 
the  field  failures. 

In  the  example  shown  in  Figure  :>  of  a Slew  Timer  Runout  failure,  the  linkage 
ol  existing  lunctional  test  modes  coupled  with  the  retention  of  diagnostic  data  in  the 
AVK  computer  and  the  lest  computer  created  the  required  diagnostic  routine.  For 
Phase  1 MALVIR  the  operator  selected  and  entered,  via  the  keyboard,  the  required 
sequence  ot  modes  to  isolate  the  failure.  Failure  messages  provided  instructions 
to  the  operator.  Phase  I!  utilized  the  automatic  capabilities  provided  by  Modes  7‘.) 
and  1 r>;{  to  select  the  correct  sequence.  Isolation  of  other  field  faults  were  handled 
in  a similar  manner. 

CONC1, PSION 

Modularization  of  functional  test  software  coupled  with  common  Automatic  Test 
equipment  (ATK)  for  production  and  depot  testing  provides  an  efficient  method  of 
meeting  present  and  tuture  functional  and  diagnostic  test  requirements. 
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APPENDIX  A 


DESCRIPTION  OFMINUTEMAN  III  ...  RDWARE 
AND  OPERATING  SYSTEM  HARDWARE 

DESCRIPTION  OF  MIN UTEMAN  III  TEST  SYSTEM 

The  Minuteman  III  Test  System  provides  an  effective  automated  method  of 
performing  both  factory  functional  testing  and  depot  functional  and  diagnostic  testing  of 
the  Minuteman  III  Missile  Guidance  System  (MGS)  and  subsystems  [Gyro  Stabilized 
Platform  (GSP)  and  Missile  Guidance  Set  Control  (MGSC)j.  The  Factory  Acceptance 
testing  is  performed  in  the  course  of  equipment  sell-off  at  the  Autonetics  facility  in 
Anaheim,  California.  The  depot  functional  and  diagnostic  testing  is  operated  by  the 
Air  Force  at  their  depot  in  Newark,  Ohio. 

The  Minuteman  III  Test  System  is  a time-shared  test  complex  utilizing  a central 
computer  to  control  and  monitor  test  operations  (see  Figure  A-l).  The  system  has  the 
following  features: 

1.  A test  complex  which  concurrently  controls  six  test  stations. 

2.  The  test  station  types  (MGS,  GSP,  MGSC)  are  mixed. 

3.  Testing  at  each  station  is  independent  of  and  asynchronous  to  the  testing  of 
all  other  test  stations. 

4.  Each  station  is  ensured  of  time  allocation  for  real-time  functions. 

5.  Computer  resources  are  equally  available  and  sharable  among  all  test 
stations  in  operation. 

6.  A single  copy  of  each  test  program  is  retained  in  relocatable  format  on  the 
disk. 

7.  Programs  in  core  are  shared.  (One  copy  is  capable  of  servicing  all  six  test 
stations  are  the  same  time. ) 
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STATIONS  MAY  BE  PERFORMING  SIMILAR  OPERATIONS 
f MAY  EACH  BE  CONTROLLING  UNIQUE  PROCESSES 


8.  Support  test  equipment  is  shared. 


o 


9.  Standard  interface  between  Program-Controller  and  Interface  Consoles. 

Central  Processor-Controller  and  Peripheral  equipment 

The  central  computer,  for  the  Minuteman  III  Test  System,  is  an  IBM  1800 
Processor-Controller  (P-C)  and  is  configured  as  follows: 

Depot  and  Factory 

IBM  1442  card  read/punch 

Two  - IBM  181(i  keyboard  printers 

Six  - IBM  1058  printers 

IBM  2210  disk  storage  unit  - three  drives 

IBM  1027  plotter 

Tally  mylar  tape  punch 

Digitronic  mylar  tape  reader 

Additional  equipment  at  Depot 

IBM  1443  line  printer 
Western  electric  201 B modem 

Memory  Size 

Factory  - 32K 
Depot  - 04 K 

Interface  Consoles 

The  interface  consoles  are  primarily  used  for  communication  between  the 
Processor-Controller  and  the  unit  under  test.  In  general,  all  of  the  interface  consoles 
provide  the  following: 

1.  28  vdc  primary  power  and  monitoring  circuits 

2.  Coolant  and  power  control  and  interlock  circuits 
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Digital  multimeter  for  measurement  of  AVK  and  interface  console  signals. 

4.  Test  point  selector  for  selecting  any  AVK  or  interface  console  signal. 

5.  Limited  signal  conditioning  for  such  items  as  peak  detection. 

<>.  Central  switching  which  provides  loads  for  the  AVK, stimuli  application  and 
interface  console  master  reset. 

7.  Process  interrupts  which  are  utilized  by  the  interface  console  to  notify  the 
P-C  of  problems  detrimental  to  the  AVK,  such  as  loss  of  coolant,  or  (lie 
completion  of  items  such  as  digital  multimeter  measurements. 

8.  Klectrical  isolation  between  the  P-C  and  the  interface  consoles  using  input 
and  output  isolators. 

In  addition  to  the  above  common  items,  the  interface  consoles  provide  functions 
which  are  unique  to  each  level  of  testing. 

Support  Consoles 

Two  support  consoles  are  used  in  conjunction  with  the  above  interface  consoles 
to  test  Minuteman  Ifl  Guidance  Systems.  The  two  consoles,  the  Central  Power 
Console  (CPC)  and  the  Self  Alignment  Technique  Control  Console  (SATCC)  provide 
those  unique  functions  which  were  considered  cost  effective  to  combine,  or  have  low 
usage  and  the  capability  could  not  be  justified  on  an  individual  station  basis.  The 
SATCC  basically  provides  control  of  the  optics  utilized  for  the  azimuth  reference. 

The  CPC  provides  a servo  analyzer,  timing  signals,  gyro  start  voltages,  nonprimary 
AVK  power  sources  and  a timer/counter. 


EXECUTIVE  PROGRAM 

The  Executive  Program  is  the  operating  system  of  each  test  complex.  It  con- 
trols and  allocates  the  computer  resources  and  the  support  consoles  in  accordance 
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with  the  requests  of  the  different  test  stations.  Features  of  the  Kxecutive  Program 
include  the  following: 
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1.  Scheduling  algorithm  with  both  real-time  and  time-sharing  attributes. 

2.  Dynamic  memory  allocation  with  a paging  technique. 

3.  Nonprocess  functions. 

4.  Special  message  processing  and  data  handling. 

5.  Input/ Output  processing. 

6.  Operator  communication. 

7.  Interrupt  processing. 

Scheduling  Algorithm 

The  scheduling  algorithm  of  the  Test  System  includes  both  real-time  and  time- 
sharing attributes.  The  most  constringent  time-critical  element  exists  in  the  testing 
of  the  Minuteman  III  Guidance  System.  The  Guidance  System  requires  a GO  msec 
servo  control  servicing  rate.  This  servicing,  however,  may  be  performed  in  6 msec 
or  less.  It  was  determined  that  an  additional  4 msec  would  be  sufficient  to  handle  the 
non-time-critical  functions  of  a test  system.  The  Schedular  was  thus  designed  to 
operate  with  10  msec  intervals  and  to  allocate  time  among  the  six  test  stations. 

Dynamic  Memory  Allocation  with  Sharable  Routines 

The  resident  Executive  occupies  the  low  portion  of  core  and  contains  those 
routines  which  are  required  at  all  times  to  support  testing.  To  minimize  the  size  of 
the  resident  Executive,  most  major  routines  utilize  an  overlay  scheme.  The  overlay 
programs  are  stored  on  disk  in  an  absolute  core  image  format  and  may  be  read 
directly  into  memory  for  execution,  thus  bypassing  the  program  relocation  operation. 

That  portion  of  core  which  is  not  occupied  by  the  resident  Executive  is  called 
the  "Paged  Subroutine  Area.  " This  area  is  subdivided  into  blocks  of  25G  words 
called  pages.  All  paged  programs  are  written  to  be  sharable.  A program  is  sharable 
when  one  copy  in  paged  core  is  capable  of  serving  all  six  test  stations. 
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Nonprocess  Functions 

The  Minuteman  III  Kxecutive  Online  Nonprocess  capability  is  an  adjunct  function 
which  serves  its  a programming  and  maintenance  aid  to  the  total  Minuteman  III  soft- 
ware. It  consists  of  two  assemblers,  a disk  file  management  function,  a message 
library  maintenance  function,  a set  of  utility  programs  and  a monitor  program  which 
interfaces  with  the  Kxecutive.  One  assembler,  the  Paging  Macro  Assembler,  pro- 
vides the  capability  of  modifying  and  reassembling  both  Kxecutive  and  test  programs 
for  the  IPM  1800.  The  other  assembler,  AJAX,  provides  the  capability  of  modifying 
and  reassembling  test  programs  for  the  l).‘)7.  The  disk  management  function  provides 
the  capabilities  for  updating  the  disk  file  of  test  programs  and  for  maintaining  control 
of  the  status  of  the  disk.  The  message  library  maintenance  function  may  be  used  lo 
change  individual  messages  or  load/reload  the  entire  message  library  (see  following 
section).  There  are  six  utility  programs  to  assist  the  programmer  in  patching,  dis- 
playing, or  protecting  areas  of  the  disk  or  core. 

Special  Message  Processing  and  Data  Handling 

The  Kxecutive  provides  the  capability  of  storing  prototype  messages  with  data 
format  specifications  into  message  libraries  on  the  IBM  1810.  Messages  are  stored 
successively  in  a library  and  are  assigned  unique  sequence  numbers.  This  number  is 
subsequently  used  in  a test  station  program  to  reference  the  message.  A specific 
test  station  type  can  access  only  messages  in  its  own  libraries  (thus  a (iSP  test  station 
may  not  access  a message  contained  in  the  MGS  library).  Storing  messages  in  this 
manner  eliminates  the  necessity  of  having  to  define  them  internally  in  a routine  and 
thus  reduces  the  amount  of  core  required  by  a routine.  It  also  makes  all  messages 
available  to  all  routines  of  the  same  test  type. 

The  Data  Handler  will  accept  from  a Periodic  Program  requests  to  open  a data 
file,  enter  data  into  that  data  file  and  close  that  data  file.  All  other  functions  must  be 
performed  as  a sequential  non-time-critical  task.  The  Data  Handler  also  controls  the 
transmission  of  data  via  the  modem  between  the  IBM  1800  and  a remote  SKL  computer 
(the  Central  Data  Acquisition  and  Analysis  System  - CDAAS).  Upon  the  close  of  a data 
file,  the  Data  Handler  analyzes  all  data  in  the  file,  selects  that  data  which  has  been 
flagged  as  CDAAS  data,  places  it  in  transmission  tables  and  verifies  the  successful 
transmission  to  the  CDAAS  computer. 
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The  two  IBM  1816  Keyboard/ Printers  are  the  primary  means  by  which  an 
operator  communicates  with  the  Minuteman  III  Test  System.  The  operator  communi- 
cates to  stations  1,2,  and  3 through  the  IBM  1816  - Group  1,  and  to  stations  4,  5, 
and  6 through  the  IBM  1816  - Group  2.  If  an  IBM  1816  fails  during  test  operations, 
then  the  software  automatically  permits  the  other  IBM  1816  to  communicate  with  all 
six  stations. 
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The  main  operator  communication  options  available  to  the  operator  include 
station  startup/shutdown,  control  input  to  a test  station  program,  and  data  control. 
Those  options  whose  execution  may  be  critical  such  as  station  shutdown  or  control 
input  are  executed  in  the  overlay  areas  (200  words  for  each  IBM  1816)  of  the  Operator 
Communications  section.  Those  options  whose  execution  is  not  so  urgent  such  as 
station  startup  or  data  retrieval  are  executed  in  the  Paged  Subroutine  Area. 

Input/ Output  Processing 

The  Input/Output  Processing  section  of  the  Executive  program  controls  all  of  the 
I/O  peripheral  devices  associated  with  the  test  complex.  The  devices  except  for  the 
modem  are  divided  into  two  groups.  The  first  group  includes  those  devices  which  are 
shared  among  all  six  stations,  but  which  are  allocated  for  use  by  only  one  station  at  a 
time.  This  group  includes  those  devices  whose  Input/Output  would  be  garbled  if  it 
were  being  used  by  more  than  one  station  at  a time  (e. g.  , one  station  reading  cards, 
while  another  was  punching  cards).  The  seven  devices  of  this  group  are: 

1.  IBM  1442  card  read/punch. 

2.  IBM  1443  line  printer. 

3.  TALLY  mylar  tape  punch. 

4.  DIGITRONICS  mylar  tape  reader. 

5.  IBM  1627  plotter. 

6.  The  two  IBM  1816/1053  (Keyboard  portion  only). 
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The  second  group  includes  those  devices  whose  I/O  requests  are  handled  using  a 
queuing  technique.  The  devices  of  this  group  include: 


1.  IBM  2310  disk  storage  unit  - 3 drives. 

2.  The  two  IBM  1810/1053  keyboard/printers. 

3.  The  six  IBM  1053  printers  (one  for  each  station). 

The  queuing  technique  is  a scheme  whereby  successive  I/O  requests  for  a specific 
device  are  chained  together  in  the  order  of  their  occurrence. 

Interrupt  Processing 

The  Interrupt  Handler  of  the  Executive  program  is  designed  to  handle  the  three 
IBM  1800  basic  interrupt  types. 

1.  Input/Output  Device  Interrupts. 

2.  Process  Interrupts. 

3.  Programmed  Interrupts. 

The  Interrupt  Handler  provides  a means  whereby  a response  routine  may  be  associated 
with  a specific  interrupt. 
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PART  I - GENERAL  CONSIDERATIONS 

The  concepts  for  developing  software  to  be  applied  to  automatic 
test  equipment  (ATE)  are  based  on  sound  judgment,  understanding  of  the 
requirements,  and  familiarity  with  the  functional  flexibility  of  the 
devices  involved.  Although  the  term  software  has  generally  been  applied 
to  a variety  of  data  types,  it  is  treated  in  this  writing  exclusively 
as  computer  program  elements. 

Evolution  of  a software  suite  for  ATE  requires  definition  and 
creation  of  program  coding,  program  aids,  and  related  data  essential 
to  defining  and  producing  the  Automatic  Test  Equipment  programs.  Soft- 
ware is  the  paper  that  describes  and  enables  the  processes  of  converting 
the  testing  concepts  and  philosophy  into  an  actual  operating  program. 

Software  is  developed  as  a result  of  a logical  multi-phase 
sequence  of  activities.  Figure  1 depicts  the  process  in  block  diagram 
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I 


ESTABLISHMENT  OF  REQUIREMENTS 

The  initial  step  in  ATE  software  development  defines  the  require- 
ments and  goals  of  the  programs  to  be  developed.  These  can  be  generally 
stated  as  follows: 

o Verification,  with  a high  level  of  confidence,  that  the 
unit  under  test,  is  operational. 

o Accomplishment  of  effective  fault  isolation  of  an  in- 
operative unit  to  the  lowest  desired  level,  i.e.,  sub- 
assembly,  card,  group  of  related  components,  or  in- 
dividual component. 

The  anticipated  testing  philosophy  should  be  pre-determined 
since  it  can  have  a great  deal  of  influence  on  the  design  of  the  ATE 
involved.  Detailed  knowledge  of  the  system  to  be  tested  as  well  as 
the  ATE  characteristics  serve  to  define  the  capabilities  and  limitations 
under  which  the  software  can  and  will  operate  effectively.  Automatic 
Test  Equipment  philosophy  plays  a primary  role  in  the  end  result  complexity 
of  the  software.  For  example,  the  software  required  to  test  an  entire 
system  simultaneously,  while  simulating  external  interfaces,  would  differ 
considerably  from  software  required  to  test  a system,  one  unit  at  a 
time,  with  both  internal  and  external  interfaces  simulated. 

In  addition  to  the  requirement  for  explicit  definition,  the 
software  being  developed  must  be  reasonable  from  a standpoint  of  con- 
straints imposed  by  the  system  and/or  the  ATE.  These  factors  must  be 
identified  accurately  prior  to  the  study  and  definition  phase  of  soft- 
ware development. 

STUDY  AND  DEFINITION 

The  second  phase  of  software  development  for  ATE  requires  a 
study  of  the  various  software  approaches,  methods,  and  techniques 
available  for  attaining  the  goals  identified  in  requirement  establish- 
ment. From  this  "shopping  list"  a selection  is  made  which  is  considered 
to  be  the  optimum  approach,  and  a detailed  "structure  and  composition" 
software  package  is  defined.  This  phase  can  involve  three  software 


domains  or  sets  of  functions: 

o Executive  and  Control 

o Testing  Routines 

o Analysis  and  Fault  Isolation 

It  is  important  to  remember  that  even  though  these  domains  can 
be  defined  individually,  their  interaction  cannot  be  avoided. 

SOFTWARE  DESIGN  ANb  DEVELOPMENT 

With  the  philosophy  of  testing  and  definitions  complete,  the 
software  design  phase  can  be  started.  It  may  be  economically  feasible 
to  develop  the  executive/control,  test,  and  analysis/fault  isolation 
routines  concurrently.  Regardless  of  technique,  this  effort  will  in- 
clude detailed  code  generation  and  assembly  of  various  instructions 
required  to  implement  a series  of  well  defined  routines.  Software 
should  also  be  designed  to  facilitate  additions  and/or  changes  required 
due  to  improvements  or  corrections. 

In  addition  to  these  software  programming  functions,  documentation, 
and  checkout  aids,  such  as  listings  and  flow  charts,  must  be  created. 

Close  software  design  and  development  supervisory  management 
must  be  maintained  to  assure  satisfaction  of  the  "accomodation  discipline" 
concepts.  The  developed  routines,  when  integrated  within  the  time  and 
space  frames,  must  not  exceed  the  computer  system  limitations.  In  most 
cases  allowance  should  be  made  for  a certain  percentage  of  growth. 
Executive  and  Control  Routines 

The  executive  and  control  routines  provide  the  framework  for 
establishing  testing  requirements  to  meet  automatic  testing  objectives. 
These  routines  provide  management  direction  and  communication  supervision 
for  the  overall  software  package.  The  executive  and  control  routines 
provide  for: 

o Control  instructions  from  the  operator 
o Updating  of  status  displays  indicating  progress 
and  results  of  various  tests. 
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Options  for  test  sequencing: 


o 

Run  test  sequentially 

o 

Run  test  individually 

o 

Iterate  test  individually 

or  sequentially 

o 

Internal  communication 

o 

Coordination  of  collective 
relative  to  time. 

software  functions 

Test  Routines 

Ideally,  the  individual  test  programs  should  be  modular,  this 
improves  their  utility  for  application  to  more  than  one  area  of  the 
overall  test  program.  A prime  objective  in  structuring  an  individual 
test  routine  is  to  limit  the  functional  area  to  be  tested.  With  a 
tightly  bounded  test  domain,  failure  of  a test  pinpoints  the  problem 
area  and  provides  fault  isolation  to  a lower  level  than  with  gross 
testing  approaches. 

Analysis  and  Fault  Isolation  Routines 

Many  approaches  can  be  used  to  realize  the  fault  isolation  require- 
ments of  a test  program  set.  The  versatility  and  character  of  the 
specific  selection  may  well  depnd  on;  how  many  parameters  are  to  be 
tested  in  a given  unit  of  time,  projected  levels  of  training  of  operators, 
the  time  available  for  software  development,  and  possibly  budget  or  funding 
limitations.  One  or  more  of  these  considerations  can  serve  as  constraints 
to  optimization  of  ATE  associated  software  development. 

The  fault  isolation  process  may  fall  in  one  or  more  of  the 
following  categories: 

o Manual  (INBRED)  - Using  his  knowledge  of  the  system 

under  test,  the  operator  makes  fault  isolation  decisions 
based  on  the  tests  which  were  passed  or  failed. 

o Manual  (AIDED)  - Based  on  using  a technical  manual  or 

fault  isolation  chart,  the  operator  makes  fault  isolation 
decisions . 

o Automatic  - The  software  makes  fault  isolation  decisions 
as  a function  of  tests  failed,  the  manner  in  which  they 
failed,  and  the  types  of  tests  which  were  passed  prior 
to  failure. 


o 


Semi-Automatic  - Some  combination  of  the  preceding 


categories . 

Totally  automatic  fault  isolation  and  testing  has  some  very 
distinct  economical  and  technical  advantages.  The  level  of  training 
required  for  operators  is  much  lower,  as  is  the  reduced  detail  and 
complexity  of  the  supporting  technical  and  operation  data.  One 
extremely  attractive  characteristic  of  automation  is  the  assurance  of 
a uniform  decision  process  in  the  fault  isolation  procedure.  The 
saving  of  considerable  time  coupled  with  the  technical  advantages 
must  be  traded  off  against  additional  memory,  program  complexity,  and 
associated  development  time. 


CHECKOUT  AND  INTEGRATION 


After  design  of  the  various  routines  has  been  checked  out,  as 
independent  modules  first,  and  then  in  major  routine  integration  form, 
the  total  software  unit  comprised  of  the  executive/control,  test,  and 
analysis/fault  isolation  must  undergo  checkout  and  further  integration 
These  steps,  depicted  in  Figure  2 and  3 result  in  a totally  integrated 


automatic  test  equipment  software  system. 


Figure  2 
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Completion  of  the  ATE  software  system  checkout,  verifies  all 
facets  of  the  program's  compatability . At  various  points  in  this  checkout/in- 
tegration process  changes  or  modifications  are  made,  rechecked  and  verified 
for  functionality.  The  ultimate  goal  of  this  multi-step  checkout  and  in- 
tegration process  is  a total  software  system  that  can  be  applied  to  system 
hardware  for  operational  application  with  or  without  actual  faults. 
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VERIFICATION 


The  final  phase  of  software  development  is  complete  verification, 
proving  that  the  software  capability  is  real.  This  "Kit  Proofing" 
exercise  qualifies  the  software  regarding  its  ability  to  satisfy  the 
initially  established  requirements.  Included  in  these  exercises,  are  the 
following: 

o Verification  of  Functional  Hardware 

o Program  Ability  to  Fault  Isolate 

o Methodology  For  Analyzing  Failures  Logically 
The  comparability  and  accuracy  of  technical  data  which  supports 
use  of  the  software  should  also  be  part  of  the  verification  process. 

Here  again,  changes  or  modifications  to  these  data  are  made  to  correct 
incongruities.  These  changes  are  checked  out  and  verified  for  accuracy. 
The  completion  of  what  appears  to  be  redundant,  time  consuming  activities, 
yields  software  with  an  extremely  high  level  of  confidence  that  can 
fulfill  the  ATE  testing  requirements. 

The  development  of  Automatic  Test  Equipment  is  complex,  demanding, 
and  challenging.  It  is  extremely  important  therefore,  that  the  concepts 
applied  to  the  development  process  be  based  on  step-by-step  logic.  Each 
phase  of  the  development  must  be  given  careful  attention  to  provide  a 
software  system  which  provides  long  term  effective  operational  service. 
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PART  II  - OPERATIONAL  USE 


The  concepts  outlined  in  Part  I were  applied  in  creating  the 
operational  automatic  test  equipment  software  program  described  briefly 
here  in. 

TASK:  Develop  an  Automatic  Test  Equipment  Test  Program  for 

application  to  a multi-station  computerized  navigation 
training  system. 

Automatic  Testing  Requirements 

The  testing  requirement  was  basically  to  thoroughly  test  each 
LRU,  such  that  after  test,  a high  level  of  confidence  existed  regarding 
the  LRU's  being  a totally  functional  unit. 

The  tests  were  structured  in  a manner  that  readily  lead  to  a 
faulty  subassembly  should  any  LRU  test  fail.  The  faulty  subassembly  was 
replaced,  and  the  LRU  retested. 

Most  tests  were  completely  automatic;  the  exception  was  where 
this  type  of  testing  appeared  economically  unfeasible.  In  these  cases, 
semi-automatic  testing  was  used.  The  initiation,  progress,  and  results 
of  all  tests  were  readily  apparent  to  the  operator. 

In  order  to  test  the  Converter-Storer , the  test  set  had  to 
electronically  simulate  the  Control-Indicator  panel.  Radar  Indicator, 
Cursor  Control,  and  all  external  avionics,  plus  the  computer. 

In  testing  the  Control-Indicator  panel,  the  test  set  was  re- 
quired to  simulate  the  Converter-Storer  and  Radar-Indicator  and  in  test- 
ing the  computer  is  simulated  by  the  Converter-Storer. 

The  Test  Set  consisted  of  a cabinet,  housing  a computer,  Computer 
Monitor  Unit,  Test  Control  and  Simulator  Unit,  Power  Distribution  Panel 
and  Power  Distribution  Box.  A Portable  Programmer  Fill  Unit  for  load- 
ing the  computer  memory  is  included,  but  is  not  physically  attached  to 
the  cabinet. 

The  Computer  Monitor  Unit  provided  three  basic  functions: 
o Control  of  various  computer  operations 
o Display  of  computer  status  and  data 

o Computer  control  of  indicators  and  displays 


The  Test  Control  Signal  Monitor  electronically  simulated,  under 
computer  control,  all  necessary  input  signals  that  may  be  required  for 
the  particular  unit  being  tested.  It  also  provided  indicators,  controls 
and  test  points  to  furnish  the  system  operator  with  the  progress  and 
results  of  various  tests. 

The  test  set  computer  was  identical  to  the  airborne  digital 
computer.  In  the  test  set  environment,  the  computer  controlled  the 
testing  of  the  Converter-Storer,  Control-Indicator  Panel  and  Test  Set 
self  test.  With  the  computer  as  the  LRU  under  test,  the  tests  were 
performed  by  the  Fill  and  Monitor  Units.  The  computer,  under  the 
supervision  of  the  software  and  with  simulated  inputs  from  the  test 
set,  tested  the  Arithmetic  and  Control  and  Special  I/O  sections. 

The  Power  Distribution  Panel  provided  the  means  of  controlling 
power  to  various  parts  of  the  test  set. 

Software  Requirements  and  Objectives 

The  software  development  objectives  were: 

1.  To  verify  with  a high  level  of  confidence  that  an 
LRU  is  operational. 

2.  To  provide  a means  of  fault  isolating  the  faulty  LRU 
to  as  low  a level  as  possible. 

3.  To  provide  the  capability  of  reiterating  selected 
tests  indefinitely,  as  an  aid  to  troubleshooting  and 
detecting  intermittent  failures. 

4.  To  design  all  tests  for  automatic  operation  except 
in  instances  where  semi-automatic  operation  was  more 
feasible . 

5.  To  design  the  control  and  operating  procedures  in  a 
manner  that  would  make  the  actual  operation  of  the 
equipment  and  testing  procedures  as  simple  as  possible. 

6.  To  operate  within  the  memory  and  real  time  constraints 
of  the  computer. 
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Software  Development 

Executive  and  Control  Routines:  The  Executive  and  Control 

Routines  providing  the  basic  framework  made  possible  the  realization 
of  established  test  design  criteria  to  meet  the  automatic  testing 
objectives;  these  routines  were  developed  first.  Individual  test 
routines  were  then  developed  within  the  limitations  of  the  executive 
control  routines. 

The  Test  Set  executive  and  control  routines  were  keyed  to  an 
external  interrupt  transmitted  every  ten  milliseconds  from  the  Test 
Control  signal  monitor  to  the  computer.  All  timing  and  housekeeping 
functions  to  be  performed  periodically  were  executed  during  this 
interrupt  routine.  Some  examples  of  these,  are: 

o Interrogating  the  test  set  operator  interface  controls 
to  determine  if  the  operator  is  communicating  with  the 
program. 

o Maintaining  the  computer  validity  signal  which  indicates 
proper  operation  of  the  computer  and  enables  various  I/O 
functions . 

o Updating  various  displays  with  either  new  information 
indicative  of  tests  in  progress  and  test  results,  or 
if  there  are  no  changes,  redisplaying  of  previous  in- 
formation. 

o Incrementing  a real  time  counter,  which  would  be  utilized 
in  the  various  test  routines. 

Three  LRU's;  the  Computer,  Converter-Storer , and  Control  Panel, 
were  to  be  tested.  A specific  overall  test,  composed  of  many  lower 
level  test  steps  was  designed  for  each  LRU  and  the  major  units  of  the 
Test  Set  itself.  Each  overall  LRU  test  was  identified  with  a test 
number,  and  contained  within  that  particular  test  were  many  test 
steps.  Integral  to  each  test  step  were  several  substeps. 

It  was  the  function  of  the  executive  and  control  routine  to 
provide  the  operator  with  several  options  regarding  which  test  he 
desired  to  run,  and  in  what  manner  he  wanted  that  test  run.  The 
following  test  options  were  available  to  the  operator  and  could  be 
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selected  by  setting  the  proper  controls  on  the  Computer  Monitor  Unit: 

o Execute  the  total  LRU  test  automatically,  sequentially 
calling  each  test  step  and  sub-step,  stopping  only  if  a 
failure  occurs. 

o Execute  only  one  specific  test  step  and  stop. 

o Execute  one  specific  test  step,  continuously  repeating 
the  process,  stopping  only  if  a failure  occurs. 

o Execute  one  specific  test  step  continuously  even  though 
a failure  is  occurring. 

The  executive  routine  performed  other  necessary  functions  which 
were  not  accomplished  in  the  individual  test  routines.  It  determined 
the  validity  of  each  test  requested  by  the  operator  and  if  an  invalid 
test  were  requested,  the  test  was  rejected.  It  also  initialized  the 
memory  at  the  beginning  and  end  of  each  test  and  maintained  the  roll 
table  position  in  memory. 

Test  Program  Development 

Each  LRU  test  program  was  assigned  a test  number.  The  individual 
test  sub-program,  many  of  which  may  be  required  to  build  a test  program, 
were  identified  as  a test  step  and  assigned  a number. 

The  objective  of  each  test  subprogram  (test  step)  was  to  verify 
a limited  functional  area  of  the  LRU.  The  goal,  where  possible,  was 
to  limit  the  domain  of  each  test  step  to  a group  of  related  components. 
The  smaller  the  domain  of  each  test  step  the  better,  should  the  test 
fail,  the  problem  area,  and  related  fault  isolation  could  be  defined 
to  a lower  level. 

An  example  of  this  testing  philosophy  is  the  Analog  to  Digital 
section  of  the  Converter-Storer  test.  The  central  part  of  the  con- 
verter is  time  shared  for  all  input  channels,  therefore,  once  this 
central  part  is  proven,  succeeding  tests  prove  peripheral  areas  and 
functions  such  as  individual  input  channel  operation  and  accuracies. 

The  four  test  steps  that  make  up  the  total  A to  D Converter  test,  start 
as  simply  as  possible  and  then  build  to  include  more  and  more  detail, 
using  the  first  elementary  test  as  the  foundation  upon  which  the 
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succeeding  tests  are  built.  The  objective  of  the  first  test  step  is 
to  prove  the  time  shared  central  part  of  the  A to  D converter.  To 
do  this  the  program  commanded  a conversion  on  an  internally  provided 
voltage  on  the  first  of  the  two  self-test  channels,  bypassing  all 
other  input  channels  and  multiplexing  circuitry.  It  verified  that  a 
proper  conversion  and  interrupt  occured.  Should  the  test  fail,  the 
manner  in  which  it  fails  contributes  a great  deal  to  the  fault-isolation 
process  which  follows.  If  for  example,  there  is  no  response  at  all  to 
the  conversion  command,  it  is  difficult  to  fault  isolate  to  a lower  level 
than  the  total  A to  D converter  subassembly.  However,  if  a conversion  and 
interrupt  do  occur  as  a result  of  the  command,  but  the  resulting  con- 
version is  out  of  tolerance,  the  test  program  has  learned  that  the  con- 
version process  works,  but  not  within  specifications,  and  this  additional 
knowledge  aids  in  fault  isolation  to  a lower  level  since  certain  areas 
of  the  converter  can  now  be  eliminated  as  the  possible  cause.  The 
second  test  step  verified  conversion  capability  on  the  second  self-test 
channel,  and  that  the  interrupt  timing  is  correct.  The  third  step  in- 
dicates that  the  28  multiplexed  DC  inputs  are  properly  switched  and 
accurate,  and  the  fourth  step  shows  that  the  synchro  input  channels 
are  properly  selected  and  accurate. 

In  the  process  of  failing  any  one  of  these  tests,  the  test 
program  can  provide  a great  deal  of  useful  fault-isolation  information 
by  remembering,  not  just  that  the  test  failed,  but  in  what  manner  it 
failed.  In  addition,  useful  fault-isolation  information  is  available 
through  analyzing  the  succession  of  tests  which  have  passed  prior  to 
the  failure.  If  for  example,  a single  analog  to  digital  converter 
channel  fails  the  fourth  test  step  at  only  one  angle  after  having 
passed  the  first  three  test  steps,  it  should  be  possible  to  isolate 
the  problem  to  a rather  small  group  of  components.  Passage  of  the 
previous  tests  has  already  proven  the  majority  of  the  A to  D converter 
functions . 

To  provide  the  capability  of  remembering  the  various  failure 
mode  of  any  test  step,  certain  status  and  substatus  words  are  reserved 
in  memory  for  each  test  step.  Each  bit  in  these  words  is  assigned  a 
specific  meaning.  If  during  a test,  a failure  occurs,  the  test  program 
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sets  the  appropriate  bit  in  the  proper  status  or  substatus  word  to  a one, 
then  continues  on  to  the  next  subtest.  In  addition  to  status  and  sub- 
status words,  other  information  of  significance  to  the  failure  is  re- 
tained in  memory  anc  is  available  for  interrogation  after  the  test  step 
has  been  completed.  Examples  of  such  information  would  be  the  actual 
conversion  word  for  an  out  of  tolerance  Analog  to  Digital  converter 
channel  or  the  bit  pattern  read  back  to  the  computer  from  a register 
test . 

Upon  completion  of  each  test  step  there  is  a substantial  amount 
of  information  from  that  test  retained  in  the  computer  memory.  The 
specific  requirements  for  automatic  testing  of  this  system  are 
verification  of  operational  units  and  fault  isolation  of  faulty  units 
to  the  replaceable  subassembly  level  only.  To  fault  isolate  to  the 
subassembly  level,  small  part  of  this  retained  information  is  required. 
In  many  instances,  when  a failure  occurs  there  is  sufficient  information 
available  from  the  automatic  test  to  isolate  the  failure  to  a small 
group  of  components.  By  utilizing  the  iteration  capability  of  the  soft- 
ware and  an  oscilloscope,  the  failure  can  be  isolated  to  a component 
level . 

It  should  be  noted  that  there  are  certain  test  situations  in 
which  it  is  difficult  to  fault  isolate  beyond  the  subassembly  level. 

These  situations  do  not  occur  often,  but  when  they  do,  it  is  usually 
due  to  a lack  of  communication  between  the  computer  and  the  functional 
area  in  test.  An  example  of  this  dilemma  would  be  the  failure  of  the 
first  test  step  of  the  Analog  to  Digital  Converter  Test,  in  a mode 
where  no  interrupt  or  conversion  occurs.  The  test  program  would  have 
learned  only  one  fact,  the  analog  to  digital  converter  is  not  function- 
ing, and  the  fault  isolation  resulting  from  this  failure  would  be  only 
to  the  analog  to  digital  converter  subassembly  itself. 

The  automatic  testing  and  fault  isolation  capabilities  of 
this  Test  Set  and  Software  were  considerably  greater  than  required  for 
their  specific  purpose  of  LRU  verification  and  fault  isolation  of  the 
system  to  the  subassembly  level.  There  is  a great  deal  more  that  can 
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be  done  with  this  type  of  test  equipment  and  software  in  the  future  to 
provide  fault  isolation  to  considerably  lower  levels,  and  to  require 
less  decision  making  on  the  operator's  part.  Some  of  the  advantages 
to  be  realized  could  be  the  elimination  of  lower  level  test  equipment, 
a decrease  in  the  operation  and  fault  isolation  manuals,  less  training 
time  for  equipment  operators  and  a uniform  decision  process  in  the  fault 
isolation  procedure. 

This  system  automatic  test  software  has  been  in  operational  use 
since  early  1973.  Throughout  this  period  it  has  never  become  necessary 
to  incorporate  any  changes,  corrections  or  improvements.  Time  and 
performance  have  proven  that  a logical  approach  to  applying  the  concepts 
of  software  development,  pays  off. 
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A MODULAR  APPROACH  TO  AUTOMATIC  TEST  SOFTWARE 


BENNETT  A.  MEYER 
The  Singer  Company 
Kearfott  Division 
Little  Falls,  New  Jersey 


ABSTRACT 

An  efficient  modular  software  system  has  been 
developed,  with  features  that  address  the 
problems  of  automatic  test  systems.  Language 
statements  and  the  procedures  associated  with 
them  are  formulated  in  a simplified  manner, 
allowing  future  ATE  languages  to  be  imple- 
mented without  system  level  programming. 

It  is  shown  how  most  test  languages  in  exis- 
tence today  can  be  described  in  terms  of  a 
unified  grammar.  The  ATE  system  designer 
first  describes  the  language  statements  he 
desires  to  implement  in  terms  of  this  grammar. 
Since  the  grammar  allows  statements  of  most 
existing  ATE  languages  to  be  described,  it  is 
not  necessary  to  create  new  languages  for  new 
test  systems. 

However,  a test  language  does  not  consist  of 
syntax  alone.  For  each  statement,  the  actions 
that  result  must  be  described  in  terms  of  pro- 
cedures, written  in  a language  that  allows 
incorporation  into  the  test  system  operating 
software.  The  resulting  actions  are  specified 
in  terms  of  the  interface  of  the  test  instru- 
ments and  the  unit  under  test  (UUT) . 

The  paper  describes  how  the  tasks  of  language 
developement  can  be  reduced  to  a cookbook  pro- 
cedure. Statements  of  any  desired  test 
language  can  be  accommodated  by  these  rules  of 
generalized  language  grammar.  Execution  can 
be  performed  in  a compiled  or  interpretive 
environment  and  is  independent  of  the  charac- 
teristics of  the  language.  This  design  pro- 
cess yields  the  added  benefit  of  language 
standardization,  since  the  procedure  is  appli- 
cable to  a broad  range  of  ATE  languages. 

INTRODUCTION 

In  recent  years,  the  rapid  growth  of  automatic 
test  equipment  has  spurred  an  equally  rapid 
proliferation  of  automatic  test  languages. 

The  magnitude  of  the  problem  of  proliferation 
of  differing  test  languages  can  be  more  fully 
appreciated  by  noting  that  the  Air  Force  cur- 
rently has  an  approximate  inventory  of  108 
different  types  of  automatic  test  systems,  and 
a total  of  60  different  test  languages.  This 
indicates  that  each  of  the  60  ATE  test  lan- 
guage is  currently  utilized  with  fewer  than 
two  different  types  of  ATE  system,  on  the 
a verage . 


Since  an  automatic  test  system  language  and 
its  associated  operating  system  represents  a 
large  development  expenditure,  it  seems  rea- 
sonable to  undertake  development  of  a single 
language  processor  that  can  serve  the  needs  of 
a variety  of  differing  automatic  test  systems. 


LEVELS  OF  LANGUAGE 

As  an  automatic  test  software  system  passes 
through  the  stages  of  definition,  design,  pro- 
gramming, integration,  and  checkout,  and  is 
finally  placed  on-line,  several  types  of  pro- 
gramming skills  are  incorporated  into  the 
total  software  product.  In  a recently  com- 
pleted ATE  system,  the  following  programming 
activities  were  in  evidence: 

1 ■ LANGUAGE  PROCESSOR:  Assembly  language 

programming  to  create  the  language  processor 
and  operating  system.  In  the  case  considered, 
an  interpreter  was  developed  for  use  as  the 
test  language  processor.  The  operating  sys- 
tem was  selected  from  those  available  from  the 
computer  vendor.  The  interpreter  remains  res- 
ident during  the  excution  of  a test  program. 
The  source  coding  of  the  application  program 
is  loaded  into  the  interpreter  at  the  time 
that  program  execution  is  desired.  The  source 
program  resides  in  the  core  memory  of  the  com- 
puter throughout  program  execution.  The  in- 
terpreter executes  the  program  directly  from 
the  source  language  by  inspecting  each  lan- 
guage statement  at  the  time  it  is  to  be  execu- 
ted, then  performing  the  necessary  operations. 
The  interpreter  maintains  symbol  tables,  var- 
iables, and  intermediate  storage  as  required 
for  application  program  execution,  and  exe- 
cutes statements  according  to  the  numerical 
order  of  their  line  numbers. 

The  use  of  an  interpreter  as  a test  language 
processor  offers  the  advantages  of  speed  of 
application  program  development,  since  the 
task  of  compilation  is  eliminated.  Further- 
more, an  interpreter  allows  application  pro- 
grams to  be  integrated  with  their  respective 
end  items  in  an  interactive  manner,  allowing 
application  program  bugs  and  changes  to  be 
serviced  through  manual  exercise  of  the  test 
language,  at  the  test  station. 

2.  DRIVERS:  Assembly  language  programming  to 

provide  drivers  for  the  electronic  instru- 
ments, stimuli,  and  switching  devices  provid- 
ed the  ATE  set.  The  device  drivers  include 
all  coding  of  input/output  instructions  neces- 
sary to  transfer  data  to  the  hardware  devices. 
Since  the  driver  routines  are  ultimately  in- 
corporated into  the  operating  system,  they 
generally  perform  little  or  no  data  manipula- 
tion. Their  main  purpose  is  to  perform  the 
input/output  protocol  with  the  hardware  de- 
vices, to  transfer  single  units  of  data. 

3.  SERVICE  ROUTINES:  Coded  in  either  Fortran 

or  Assembly  language.  These  routines  perform 
the  algebraic  calculations  and  logical  deci- 
sions necessary  to  execute  individual  language 
statements.  At  run-time,  these  routines  re- 
ceive the  parameters  from  the  language  state- 
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merits,  determine  the  actions  that  need  to  be 
taken,  and  call  the  drivers  necessary  for 
physical  input  and  output.  Since  certain 
language  statements  may  require  several  I/O 
actions  to  various  devices,  the  service  rou  - 
tines  are  responsible  for  calling  the  instru- 
ment drivers  m the  necessary  order.  It  is 
also  possible  for  a statement  of  the  language 
to  have  no  requirement  for  I/O,  as  in  the  case 
of  a data  conversion  statement.  In  these 
cases,  the  service  routine  performs  the  compu- 
tation but  does  not  perform  I/O  actions. 

4.  LANGUAGE  DEI- I II ITION  TAB  LOS  : Assembly  lan- 

guage coding  to  specify  the  format  of  the 
source  language.  As  will  be  described  later, 
the  source  language  is  divided  into  two  parts. 
The  invar lant  part  of  the  language  does  not 
reflect  the  instrument  complement  of  a parti- 
cular ATE  console,  but  contains  language 
statements  that  relate  to  computation-based 
actions  that  would  normally  be  found  in  an 
algebraic  language  such  as  Basic  or  Fortran. 
This  part  of  the  test  language  is  defined 
within  the  interpreter  itself.  The  augmented 
language  statements  pertain  to  the  instruments 
and  special  hardware  devices  that  are  present 
on  a particular  ATE  console.  Different  in- 
struments and  devices  present  on  different 
types  of  ATE  require  their  own  sets  of  state- 
ments of  the  augmented  language.  The  augmen- 
ted language  is  defined  in  a tree-organized 
table  that  becomes  a part  of  the  total  soft- 
ware package.  The  statements  that  augment 
the  invariant  language  to  provide  a capabili- 
ty of  exercising  specialized  instruments, 
stimuli,  and  switching  devices  are  defined 

in  this  table. 

5.  APPLICATION  PROGRAMS:  Programs  that  are 

writ  ten  Fh  the  application  programming  lan- 
guage of  the  ATE.  These  programs  utilize  the 
language  to  perform  tests  upon  the  end  item 
assemblies.  Several  such  application  programs 
may  be  resident  within  the  disc  storage  unit 
of  the  ATE  system;  however,  only  one  program 
can  be  executed  at  a time. 

6.  OPERATOR  COMMANDS:  The  test  station  op- 

erator enters  commands  into  the  terminal  unit 
at  the  ATE  console  to  select  an  application 
program  for  execution  and  initiate  it.  In  a 
sense,  the  operator  commands  can  be  considered 
as  the  equivalent  of  an  extremely  high  level, 
concise  language.  Since  the  level  of  a lan- 
guage can  be  measured  by  the  amount  of  action 
that  results  from  a single  statement,  it  can 
be  seen  that  the  single  operator  command  that 
invokes  execution  of  an  entire  program  file 
has  an  extremely  high  language  level.  In  fact, 
the  ultimate  purpose  of  all  lower  levels  of 
programming  is  to  provide  the  ATE  system  oper- 
ator with  a complete  software  system  that 
allows  him  to  execute  entire  end  item  test  pro- 
grams with  a single  command.  This  ultimate 
statement  of  the  operator  command  language  has 
the  following  form: 

RUN  <file> 

where  <file>  designates  the  program  file  to  be 
called  from  the  disc  storage  unit  and  executed. 
Other  operator  commands  allow  program  files  to 
be  loaded,  stored,  listed  or  edited. 

Each  of  the  foregoing  levels  of  programming 
serves  to  provide  the  foundation  for  higher 


programming  levels.  Furthermore,  programming 
at  each  of  these  levels  is  performed  at 
different  points  during  the  progress  of  the 
ATE  software  effort,  and  by  different  skill 
levels.  The  chart  in  Figure  1 shows  the  skill 
levels  necessary  for  each  phase  of  the  software 
effort . 

RECURRING  DESIGN 

In  an  ATE  program  in  which  a number  of 
identical  ATE  systems  are  built  to  the  same 
drawings  and  specifications,  the  recurring  ef- 
fort to  provide  each  ATE  with  an  identical  set 
of  software  is  not  extensive  or  complex.  In 
most  cases,  the  software  effort  to  support  a 
recurring  hardware  build  consists  of  duplica- 
ting the  discs  or  tapes  to  be  shipped  with  the 
system.  Certification  may  be  performed  to  veri- 
fy that  they  are  true  copies  of  the  original 
discs  or  tapes.  However,  a greater  software 
effort  is  required  when  a new  item  of  ATE  is 
first  designed.  Assuming  that  a level  of 
maturity  has  been  reached  in  the  software 
language  processor,  it  should  not  be  necessary 
to  design  a new  language  in  totality  for  each 
new  or  modified  ATE  design.  However,  it  can 
also  be  seen  that  a newly  designed  or  modified 
ATE  system  will  inherently  have  specialized 
stimuli,  measurement,  and  switching  devices 
that  may  not  have  been  present  on  previous 
systems.  For  this  reason,  certain  defined 
tasks  must  be  performed  to  develop  the  soft- 
ware for  a new  ATE  system.  These  tasks  re- 
late to  the  design  of  suitable  language  state- 
ments to  accomodate  the  intrumentation  de- 
vices, and  the  programming  of  the  drivers, 
service  routines,  and  language  definition 
tables  to  be  appended  to  the  previously  exis- 
ting software  processor.  Since  these  tasks 
must  be  performed  for  each  new  item  of  ATE, 
they  are  designated  as  recurring  design.  The 
tasks  involved  in  the  recurring  design  phases 
are  well-defined,  and  can  be  performed  accor- 
ding to  a cookbook-like  design  procedure.  The 
new  language  statements  that  result  from  this 
process  will  be  perfectly  integrated  with  the 
statements  inherent  in  the  unmodified  part  of 
the  language  processor. 

After  a new  set  of  statements  is  appended  to 
the  language  processor,  application  programs 
must  be  written,  using  the  new  statements  that 
have  been  implemented.  The  tasks  of  applica- 
tion program  generation  are  performed  for  each 
end  item  to  be  tested. 

The  design  and  programming  tasks  that  must  be 
performed  for  new  ATE  systems  are  summarized 
in  the  chart  of  Figure  2. 

INVARIANT  LANGUAGE  SET-BASIC 

The  language  system  considered  here  includes  a 
fundamental,  invariant  language  that  implements 
the  language  functions  pertaining  to  arithmetic 
operations,  operator  inputs  and  outputs, 
printout  control,  program  execution  jumps  and 
loops,  and  data  file  manipulation.  An  extended 
set  of  Basic  Language  is  utilized  as  the  in- 
variant language.  As  such,  the  language  is 
used  as  the  framework  for  controlling  the  ex- 
ecution of  application  tests,  performing  data 
reduction  of  test  results,  producing  print- 
outs, and  performing  any  other  associated  data 
processing  or  computation  tasks.  The  language 
includes  the  following  types  of  statements: 


ABORT 

Issues  hardware  master  clear  to 
reset  all  instrumentation  and 
perpipheral  devices. 

BOOLEAN 

AND 

Boolean  ''and". 

BOOLEAN 

OR 

Boolean  "or". 

BOOLEAN 

XOR 

Boolean  "exclusive  or". 

CHAIN 

Automatic  linking  to  another 
program. 

CLOSE 

Closes  a file. 

COM 

Specifies  common  array  or  vari- 
able. 

DATA 

Specified  data. 

AUGMENTED  LANGUAGE  SET 

The  syntax  of  Basic  Language  can  be  expanded 
by  the  addition  of  language  statenents,  to 
give  specialized  capabilities  to  particular 
system  configurations.  After  language  state- 
ments are  added  to  the  software  package,  they 
become  integral  elements  of  the  user  language 
The  set  of  statements  that  are  added  to  the 
standard  Basic  syntax  are  collectively  re- 
ferred to  as  the  Augmented  Basic  Language. 
Once  installed  in  a particular  software  sys- 
tem configuration,  a set  of  Augmented  Basic 
Language  statenents  becomes  a permanent  ad- 
dition to  that  single  system.  It  then  pro- 
vides a customized  user  language  facility, 
which  can  be  used  in  programming  the  spe- 
cialized tasks  to  be  performed  at  the' test 
station. 


DIM 
DO  XF 
END 

FCR 
GO  TO 

GO  TO. . .OF 
GOSUB 

GOSUB. . .OF 
IF 

INPUT 

LET 

MAT 

NEXT 

OPEN 

PRINT 

READ 

REM 

RESTORE 


Specifies  array  size. 

Enable  XF  Flag. 

Terminates  execution.  (not 
required  as  last  statement 
in  program) 

Begins  loop. 

Transfers  control. 
Multibranch  transfer. 

Executes  subroutine. 
Multibranch  subroutine. 


Logical  test. 

Data  entry  from  terminal. 
Assignment  operator. 

Matrix  operations 
End  of  loop. 

Opens  a file. 

Display  on  terminal,  or  output 
to  file  or  device. 

Read  value  from  data  blocks  or 
f ile. 

Remark . 

Reset  data  pointer. 


The  use  of  Augmented  Basic  Language  state- 
ments offer  several  advantages  and  unique 
features  to  the  programmer  of  application 
programs.  Since  the  formats  of  the  allow- 
able statements  are  formulated  by  those 
having  a thorough  knowledge  of  the  system 
functional  details,  all  input/output  re- 
quests to  specialized  devices  are  made 
through  the  Augmented  Language  statements, 
so  that  all  I/O  calls  are  made  with  proper 
formats  and  parameters.  Furthermore,  for- 
matting and  manipulation  of  input/output 
data  is  performed  by  the  service  routines 
for  the  Augmented  Lanquage  statements,  thus 
relieving  the  application  programmer  of  these 
repetitive  tasks. 

The  structure  of  the  Augmented  Language  de- 
mands that  the  application  programmer  enter 
all  required  parameters  in  each  statement. 

Both  omissions  and  inclusion  of  extra  para- 
meters generate  error  messages,  which  cite  the 
offending  statement.  Since  the  syntax  re- 
quirements of  the  Augmented  Language  state- 
ments must  be  properly  fulfilled  at  the  time 
the  statement  is  entered,  it  is  inherently 
immposible  for  the  interpreter  to  accept 
source  language  statements  having  improperly 
constructed  I/O  calls.  In  this  manner,  im- 
proper I/O  calls  are  rejected  by  the  inter- 
preter as  being  syntactically  incorrect. 

2.  STRUCTURE  OF  AUGMENTED  STATEMENTS:  The 

Augmented  Langauge  statements  are  composed  of 
the  following  elements,  which  are  utilized  as 
described  below  to  construct  complete  state- 
ments : 


RETURN 


Subroutine  return. 


ELEMENT 


DESCRIPTION 


RUN 

SKIP  XF 

STOP 

WAIT 


Call  program. 

Disable  XF  Flag. 
Terminates  execution. 
Time  delay. 


verb 


The  initial  word  of  a 
statement,  immediately 
following  the  statement 
number  and  optional  flag. 
A verb  consists  of  an 
ASCII  character  string. 


( impl led 

LET)  Assignment  operator. 


Algeb  aic  operators  and  intrinsic  functions 
also  form  a part  of  the  extended  Basic  Lan- 
guage. The  usage  and  syntax  of  the  language 
follow  all  conventions  of  the  standard 
Dartmouth  Basic  Language. 


noun  A noun  consists  of  an 

ASCII  character  string. 
Both  verbs  and  nouns  may 
consist  of  any  of  the  64 
printable  ASCII  characters 
except  ( or  ( . 

( and  ) The  left  and  right  paren- 

thesis characters  are 


C-parameter 


V-parameter 


S-parameter 


utilized  to  delineate 
lists  of  parameters  with- 
in a statement.  All  para- 
meters such  as  variables, 
arithmetic  constants, 
arithmetic  expressions, 
and  strinqs  enclosed 
within  quotes,  are  con- 
tained between  left  and 
right  parenthesis. 

A list  of  parameters,  sep- 
erated  by  commas,  and  en- 
closed within  parenthesis. 
These  parameters  contain 
quantities  that  may  be  de- 
termined at  the  time  the 
application  program  is 
written  (constants)  or 
may  be  determined  at  run- 
time (variables  or  ex- 
pre  sions) . The  para- 
meters in  the  parenlist 
may  be  any  of  the  types 
described  below. 

A mathematical  constant, 
within  thi  approximate 
3 8 

range  of  ±10  . Integer 

or  fractional  values  may 
be  given,  since  the  nu- 
nercial  values  are  stored 
internally  in  floating 
point  representation  in 
either  case.  Values  may 
be  given  in  free-form 
format,  with  decimal 
point  or  exponential  rep- 
resentation utilized  as 
desired . 

A single  variable.  The 
given  variable  may  be 
either  simple  (not  sub- 
scripted) or  subcripted. 

If  the  variable  is  sub- 
scripted, then  the  sub- 
script may  be  any  valid 
Basic  language  subscript 
expression. 

An  ASCII  string,  enclosed 
within  double  quotes.  The 
string  may  include  any  of 
the  64  printable  ASCII 
characters  except  for  the 
double  quote.  The  string 
may  be  of  any  length,  so 
long  as  the  total  state- 
ment length  does  not  ex- 
ceed 72  characters.  Note 
that  S-parameter  strings 
differ  from  the  strings  of 
verbs  and  nouns  in  that 
verbs  and  nouns  are  deter- 
mined at  the  time  a set  of 
language  statements  is  de- 
signed, while  S-parameter 
strings  are  determined  at 
the  time  a particular  ap- 
plication program  is  writ- 
ten. Verbs  and  nouns  are 
therefore  considered  as 
elements  of  the  language. 
S-parameters  are  strings 
utilized  by  application 


C-parameter 


programmers  for  particular 
uses  within  a program. 

This  parameter  may  be 
either  a constant,  vari- 
able, string,  or  expres- 
sion. If  the  G-parameter 
consists  of  a constant, 
variable,  or  string,  then 
the  descriptions  of  the  C- 
parameter,  V-parameter,  or 
S-parameter,  respectively, 
will  apply.  Otherwise, 
the  G-parameter  may  be  any 
valid  Basic  language  ex- 
pression. Such  expres- 
sions may  consist  of  vari- 
ables or  constants,  in 
combination  with  arithme- 
tic operators,  logical  op- 
erators, or  functions, 
configured  according  to 
the  general  syntactical 
rules  for  Basic  expres- 


Complete  augmented  Basic  language  statements 
are  described  by  the  following  Backus-.'Jaur 
represents  t ions : 

<augmented  statement?  : :=<verb>  ^ 

<augmented  statement-* 
<noun> | 

<augmented  statement> 
(<parenlist>) 


<verb>  < predetermined  ASCII  string, 

chosen  for  relevance  to  ATE 
function? 

<noun>  ::=  < predetermined  ASCII  string, 
chosen  for  relevance  to  ATE 
function? 

<parenlist?  ::=  <G-parameter ? | 

<C-parameter?  j 
<V-parameter? | 

<S-parameter?  j 
<parenlist?,  <G-parameter ? | 
<parenlist>,  <C-parameter ? | 
<parenlist>,  <V-parameter? | 
<parenlist?,  <S-parameter ? 

<G-parameter > : :=  <expression> | <C-Darameter ? | 
<V-parameter? | <S-parameter > 


<C-parameter > : 
< V-parameter ? : 
<S-parameter > : 


=<constant> 
=<var iable? 
="<string>" 


In  the  above  descriptions,  symbols  have  the 
following  meanings; 

: : = "is  defined  as" 


<?  enclose  an  element  of  the  language 


622 


V 


All  other  symbols  that  appear  indicate  actual 
characters  or  punctuation  marks  in  the 
various  statements. 

The  above  syntax  requirements  delineate  the 
structure  of  single  statements  of  the 
Augmented  language. 

AUGMENTATION  PROCEDURE 

In  order  to  design  a set  of  Augmented  lan- 
guage staeements,  it  is  necessary  to  first 
delineate  the  specific  functions  of  the 
devices  to  be  controlled.  In  cases  where 
the  Augmented  language  statements  are  uti- 
lized to  perform  computational  processes 
rather  than  input-output  actions,  the  para- 
meters and  formats  to  be  passed  to  the 
process  must  be  defined. 

After  definition  of  the  individual  functions 
to  be  exercised,  a set  of  language  statements 
must  be  constructed.  The  individual  state- 
ments must  conform  to  the  syntax  requirements 
described  above.  Finally,  the  statements 
must  be  arranged  in  a sequential  order  and 
described  in  a terminology  that  allows  easy 
coding  for  incorporation  into  the  interpreter. 

STEP  1 : Describe  all  desired  statements  to  be 

added  to  the  language  in  a form  consistent 
with  the  syntax  requirements  given  above  in 
Backus-Naur  form.  At  this  time,'  all  verbs  and 
nouns  must  be  selected.  Further,  the  desired 
order  of  each  of  the  selected  elements  within 
a statement  must  be  determined.  Each  paren- 
thesis list  to  be  included  within  the  state- 
ment must  be  selected,  along  with  the  allow- 
able forms -of  its  constituent  terms.  The  pa- 
renthesis lists  to  be  utilized  within  a given 
statement  must  have  a definite  number  of  terms 
of  selected  types,  with  the  following  excep- 
tion: as  an  option  that  may  be  invoked  in  the 

design  of  a statement,  a parenthesis  list  may 
be  allowed  to  have  an  indefinite  number  of 
terms,  so  long  as  the  optional  terms  are  all 
of  the  same  type,  and  are  all  located  to  the 
right  of  the  terms  whose  presence  is  manda- 
tory. Phrased  differently,  an  option  is 
available  whereby  the  rightmost  group  of  terms 
within  a parenthesis  list  may  be  of  an  inde- 
terminate length,  but  must  be  of  the  same 
type. 

STEP  2;  Arrange  the  desired  statements  of  the 
Augmented  language  into  a linguistic  tree. 

The  tree  then  defines  legal  word  sequences  for 
the  set  of  statements.  It  represents,  in 
graphic  format,  how  the  verbs,  nouns,  and 
parameters  of  the  statements  are  arranged. 

All  legal  statements  will  lie  along  the 
branch  structure  of  the  tree.  Conversely, 
statements  that  do  not  conform  to  the  linking 
of  tree  branches  are  not  legal,  and  will  be 
rejected  by  the  language  interpreter.  Figure 
3 shows  a typical  linguistic  tree. 

STEP  3 : Encode  the  syntax  tree  generated  in 

the  previous  step  into  machine  readable  co- 
ding. The  encoded  linguistic  tree  will  ulti- 
mately become  incorporated  into  the  interpre- 
ter, and  will  be  utilized  for  syntax  checking 
of  source  language  statements. 

STEP  4 : Perform  programming  necessary  to 

generate  service  routine  and  driver  nodules 
to  perform  interpretive  execution  of  each 


statement  of  the  Augmented  Basic  Language. 

The  programming  may  be  performed  in  any  con- 
venient language,  such  as  Fortran,  Alqol,  or 
Assembly  language. 

STEP  5:  Combine  the  elements  of  the  augmented 

statements  (encoded  syntax  tree,  service  rou- 
tines, and  drivers)  into  a single  software 
package.  The  task  of  creating  a single  soft- 
ware package  containing  the  standard  Basic  mo- 
dule is  performed  through  use  of  the  Loader, 
or  Linkage  Editor.  The  result  is  a software 
package  that  has  been  customized  to  the  re- 
quirements of  a specific  item  of  ATE,  with  its 
own  particular  complement  of  instruments  and 
stimuli  devices.  The  structure  of  the  cus- 
tomized interpreter  and  the  relationship  be- 
tween the  various  elements  is  shown  in  Figure 
4 . 

CONCLUSIONS 

The  creation  of  a new  programming  language  and 
operating  environment  for  each  new  automatic 
test  system  has  been  widely  proven  to  be 
highly  inefficient  from  the  standpoint  of  the 
amount  of  effort,  funding,  and  risk  that  are 
entailed.  The  modular  approach  described  here 
offers  the  following  improvements: 

o Eliminates  the  need  to  define  and  specify 
the  total  language  and  operating  environ- 
ment for  each  item  of  ATE. 

o The  only  part  of  the  test  langjage  that 
must  be  defined  is  the  set  of  statements 
that  interface  with  the  test  station 
hardware  and  instrumentation. 

o Assures  that  the  language  statements  used 
for  calculations  and  program  control  are 
identical  across  ATE  systems  of  different 
types . 

o Assures  that  the  operator  commands  and 
operating  procedures  are  identical  across 
a range  of  differing  ATE  systems. 

o Provides  the  full  data  processing  capa- 
bility of  Basic  langua  in  the  same 
software  package  utilized  for  automatic 
test  operations. 

o Gives  engineering  personnel  an  aduitional 
measure  of  familiarity  with  the  language, 
since  most  engineers  already  know  Basic 
language . 

o Allows  ease  of  documentation  and  confi- 
guration control  due  to  the  modularity 
of  the  software  system. 

o Atlas-like  statements  can  be  implemented 
to  allow  program  portability  from  other 
ATE  systems,  and  to  allow  easy  applica- 
tion program  coding  from  test  specifica- 
tions written  in  Atlas. 

o Use  of  the  same  language  format  and  oper- 
ating environment  allows  several  types 
of  ATE  to  follow  the  same  programming 
conventions . 

o The  same  language  syntax  can  be  processed 
by  an  interpreter  or  a compiler. 
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The  Joint  Services  Data  Exchange  Group  for  Inertial  Systems  is  an  informal 
organization  through  which  maintenance  experiences  are  exchanged  in  an 
attempt  to  improve  the  reliability  and  maintainability  of  inertial  equip- 
ment. It  is  a medium  for  the  exchange  of  Information  and  ideas  among  the 
various  support  agencies,  users,  maintenance  facilities,  manufacturers  and 
designers.  It  provides  a rapid  feedback  of  design  deficiency  information 
to  effect  Improved  and  more  efficient  maintenance  support. 


BACKGROUND 

The  Joint  Services  Data  Exchange  Group 
for  Inertial  Systems  was  formally 
established  in  March  1969.  Its  basic 
objectives,  principles  and  concepts 
began  about  one  year  earlier  through  a 
series  of  conferences  hosted  by  the  Air 
Force  Aerospace  Guidance  and  Metrology 
Center.  Tfte  organization  has  progres- 
sively grown  in  interest  and  attendance. 
Its  participants  now  encompass  about 
every  segment  of  the  International 
inertial  equipment  community. 

APPROACH 

The  key  to  any  successful  conference  or 
gathering  of  individuals  to  swap  ideas 
and  solve  each  others  problems  is  the 
climate  or  environment  established  for 
such  an  exchange.  It  was  recognized  that 
an  acceptance  by  the  participants  to 
freely  discuss  mutual  problems  would  meet 
with  certain  resistance.  Equally,  it  was 
recognized  that  a special  vocabulary 
exists  in  our  profession  and  some  degree 
of  translation  and  understanding  must 
evolve  before  a meaningful  exchange 
could  be  expected.  The  group  architects 
realized  the  real  benefits  and  ultimate 
payoff  would  come  from  an  exchange  that 
would  involve  all  defense  agencies, 
designers,  manufacturers,  repair  shop, 
as  well  as  commercial  aircraft  operators. 

A plan  was  designed  to  slowly  expand 
participation  and  overcome  reticence  to 
communicate  problems.  The  first  meeting 
included  Air  Force  personnel.  The  circle 
of  interest  was  then  enlarged  to  include 
all  defense  agencies.  Later  the  equip- 
ment manufacturers  and  commercial  aircraft 
operators  were  added.  As  the  last  phase 
in  rounding  out  the  program  selected 
International  organizations  have  been 
invited  to  participate.  Each  conference 
has  experienced  a progressive  buildup 
in  attendance,  enthusiasm  and  interest. 


ORGANIZATION  AND  OPERATION 

Participation  in  the  conferences  includes 
representatives  from  the  Air  Force,  Army 
and  Navy  Materiel  Commands  and  agencies 
having  a responsibility  for,  or  an 
interest  in,  specifying,  developing, 
logistics  planning  and  support,  or  using 
inertial  systems  and/or  components.  This 
group  will  also  include  representatives 
from  other  government  agencies,  user 
agencies,  consultant  organizations,  manu- 
facturers, commercial  airlines,  selected 
International  organizations  and  select  ad 
non-US  carriers  and  manufacturers. 

The  hosting  of  the  conferences  is  rotated 
among  the  participating  organizations. 

Where  possible  an  attempt  is  made  to  hold 
the  conference  at  a facility  connected 
with  the  Inertial  systems  community.  If 
the  host  is  engaged  in  the  repair/ test  of 
inertial  systems  a tour  of  these  areas  Is 
included  on  the  agenda. 

The  Aerospace  Guidance  and  Metrology 
Center  (AGMC)  functions  as  Secretariat 
and  provides  a permanent  secretary  for 
the  group.  A planning  group  with  repre- 
sentation from  the  major  participating 
elements  of  the  group  (e.g.,  government 
agencies,  consultant  organizations,  air- 
lines, etc)  is  established  to  coordinate 
and  guide  the  various  group  activities. 

In  advance  of  each  conference  a visit  is 
scheduled  to  the  designated  host  organiza- 
tion to  finalize  all  administrative  details 
for  the  next  group  conference.  Under 
normal  circumstances  the  Lost  for  a con- 
ference is  expected  to  provide  facilities 
(e.g.,  auditorium,  hall,  etc)  that  will 
accommodate  the  number  of  participants, 
audio  visual  equipment  and  operation, 
clerical  and  other  administrative  support 
as  may  be  required.  The  host  will  identify 
a focal  point  to  handle  reservations  for 
accotmaodation8,  protocol  arrangements, 
transportation,  etc. 


mr  1 1 ■■■■iiiiimi  in*~ 


